DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17496  BrowserJavaVersion: 10.71.2
Run by Phyllis at 8:36:22 on 2015-01-30
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.32706.28103 [GMT -5:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
SP: Microsoft Security Essentials *Enabled/Updated* {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
C:\Program Files (x86)\ASUS\AXSP\1.01.01\atkexComSvc.exe
C:\Windows\SysWOW64\atashost.exe
C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Windows\system32\IProsetMonitor.exe
C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe
C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe
C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\System32\WUDFHost.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files (x86)\Replay Telecorder for Skype\replay_telecorder_skype.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files (x86)\Enounce\MySpeed\MySpeed.exe
C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Users\Phyllis\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\ShopAtHome_BAC_Service.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\ShopAtHome_BAC_Service.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\Samsung Magician\Samsung Magician.exe
c:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\System32\cscript.exe
C:\Windows\SysWOW64\DllHost.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = www.google.com
uSearch Bar = Preserve
mWinlogon: Userinit = userinit.exe,
BHO: RealNetworks Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: Skype Click to Call for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
uRun: [replay_telecorder_skype] C:\Program Files (x86)\Replay Telecorder for Skype\replay_telecorder_skype.exe /start_context sys_auto
uRun: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
uRun: [3xAV] C:\Program Files (x86)\Enounce\MySpeed\MySpeed.exe
uRun: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
mRun: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [RoxWatchTray] "C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe"
mRun: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
mRun: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
mRun: [BrowserAppCoreService] C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\SahProcessManager.exe "C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\ShopAtHome_BAC_Service.exe" "restart"
mRun: [TkBellExe] "c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot
mRun: [RealDownloader] C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
mRun: [TrueImageMonitor.exe] "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
mRun: [AcronisTibMounterMonitor] C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
mRunOnce: [Malwarebytes Anti-Malware (cleanup)] "C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe" "C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware"
StartupFolder: C:\Users\Phyllis\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\Phyllis\AppData\Roaming\Dropbox\bin\Dropbox.exe
StartupFolder: C:\Users\Phyllis\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ONENOT~1.LNK - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\REALPL~1.LNK - C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
TCP: NameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{73BD1BBB-596A-4971-BC51-8CBFF9CB11DB} : DHCPNameServer = 75.75.75.75 75.75.76.76
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-mStart Page = hxxp://www.google.com 
x64-mSearch Page = hxxp://www.google.com 
x64-mDefault_Page_URL = hxxp://www.google.com
x64-mDefault_Search_URL = hxxp://www.google.com
x64-BHO: RealNetworks Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll
x64-BHO: Skype Click to Call for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
x64-Run: [RTHDVCPL] "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
x64-Run: [RtHDVBg_DTS] "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /DTSU2P
x64-Run: [IgfxTray] "C:\Windows\System32\igfxtray.exe"
x64-Run: [HotKeysCmds] "C:\Windows\System32\hkcmd.exe"
x64-Run: [Persistence] "C:\Windows\System32\igfxpers.exe"
x64-Run: [IAStorIcon] "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
x64-Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
x64-Run: [LogMeIn GUI] "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe"
x64-Run: [Acronis Scheduler2 Service] "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe"
x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
x64-Notify: igfxcui - igfxdev.dll
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Phyllis\AppData\Roaming\Mozilla\Firefox\Profiles\3hyawouq.default-1384237558205\
FF - prefs.js: browser.search.selectedEngine - Vosteran
FF - plugin: C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Nitro\Reader 3\npdf.dll
FF - plugin: C:\Program Files (x86)\Nitro\Reader 3\npnitroie.dll
FF - plugin: C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll
FF - plugin: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll
FF - plugin: C:\Program Files (x86)\thinkorswim\npthinkorswim.dll
FF - plugin: C:\Program Files (x86)\thinkorswim\nptossc.dll
FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll
FF - plugin: C:\Users\Phyllis\AppData\Local\Citrix\Plugins\104\npappdetector.dll
FF - plugin: C:\Users\Phyllis\AppData\Local\Fuze Box\Fuze Meeting\npfuzeshare.dll
FF - plugin: C:\Users\Phyllis\AppData\Roaming\Mozilla\Firefox\Profiles\3hyawouq.default-1384237558205\extensions\LogMeInClient@logmein.com\plugins\npRACtrl.dll
FF - plugin: C:\Users\Phyllis\AppData\Roaming\Mozilla\plugins\npatgpc.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll
.
---- FIREFOX POLICIES ----
.
.
.
.
.
.
.
);
.
);
.
.
.
.
.
============= SERVICES / DRIVERS ===============
.
R0 asahci64;asahci64;C:\Windows\System32\drivers\asahci64.sys [2013-1-10 47512]
R0 fltsrv;Acronis Storage Filter Management;C:\Windows\System32\drivers\fltsrv.sys [2014-12-11 116000]
R0 iaStorA;iaStorA;C:\Windows\System32\drivers\iaStorA.sys [2013-8-7 644968]
R0 iaStorF;iaStorF;C:\Windows\System32\drivers\iaStorF.sys [2013-8-7 28008]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;C:\Windows\System32\drivers\iusb3hcs.sys [2013-4-26 20464]
R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2014-7-17 269008]
R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2013-11-4 55024]
R0 tib;Acronis TIB Manager;C:\Windows\System32\drivers\tib.sys [2014-12-11 1120032]
R0 tib_mounter;Acronis TIB Mounter;C:\Windows\System32\drivers\tib_mounter.sys [2014-12-11 198432]
R0 vididr;Acronis Virtual Disk;C:\Windows\System32\drivers\vididr.sys [2014-12-11 161568]
R0 vidsflt;Acronis Disk Storage Filter;C:\Windows\System32\drivers\vidsflt.sys [2014-12-11 117024]
R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928]
R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368]
R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2014-7-22 172344]
R2 afcdpsrv;Acronis Nonstop Backup Service;C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2014-12-11 3873784]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2013-3-28 241152]
R2 asComSvc;ASUS Com Service;C:\Program Files (x86)\ASUS\AXSP\1.01.01\atkexComSvc.exe [2013-10-30 927232]
R2 atashost;WebEx Service Host for Support Center;C:\Windows\SysWOW64\atashost.exe [2013-11-12 118056]
R2 c2cautoupdatesvc;Skype Click to Call Updater;C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-7-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service;C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-7-14 1767520]
R2 DTSAudioSvc;DTSAudioSvc;C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [2013-10-30 240584]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-8-7 15720]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-5-11 733696]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;C:\Windows\System32\IPROSetMonitor.exe [2013-1-3 183200]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-10-30 169432]
R2 LMIGuardianSvc;LMIGuardianSvc;C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [2013-10-24 377704]
R2 LMIInfo;LogMeIn Kernel Information Provider;C:\Program Files (x86)\LogMeIn\x64\rainfo.sys [2013-4-30 16056]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;C:\Windows\System32\drivers\LMIRfsDriver.sys [2013-11-12 72216]
R2 mbamchameleon;mbamchameleon;C:\Windows\System32\drivers\mbamchameleon.sys [2014-6-23 93400]
R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-6-23 1871160]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-6-23 969016]
R2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2013-6-18 125584]
R2 NitroReaderDriverReadSpool3;NitroPDFReaderDriverCreatorReadSpool3;C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [2012-10-30 230416]
R2 PSI_SVC_2_x64;Protexis Licensing V2 x64;C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2010-11-30 336824]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [2014-10-26 39568]
R2 RealPlayer Cloud Service;RealPlayer Cloud Service;C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [2014-11-25 1141848]
R2 RealPlayerUpdateSvc;RealPlayer Update Service;C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [2014-10-30 31856]
R2 syncagentsrv;Acronis Sync Agent Service;C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [2014-2-4 7142320]
R2 TeamViewer9;TeamViewer 9;C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-6-13 4799760]
R3 afcdp;afcdp;C:\Windows\System32\drivers\afcdp.sys [2014-12-11 367200]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2013-10-30 96768]
R3 e1dexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver D;C:\Windows\System32\drivers\e1d62x64.sys [2013-10-30 496400]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver;C:\Windows\System32\drivers\iusb3hub.sys [2013-4-26 368112]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;C:\Windows\System32\drivers\iusb3xhc.sys [2013-4-26 786416]
R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2013-11-11 25816]
R3 MBAMSwissArmy;MBAMSwissArmy;C:\Windows\System32\drivers\MBAMSwissArmy.sys [2014-6-23 129752]
R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2014-8-22 368624]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
S2 RoxLiveShare10;LiveShare P2P Server 10;C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe [2008-6-4 309744]
S2 RoxWatch10;Roxio Hard Drive Watcher 10;C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe [2008-6-4 166384]
S2 SessionLauncher;SessionLauncher;C:\Users\Phyllis\AppData\Local\Temp\DX9\SessionLauncher.exe --> C:\Users\Phyllis\AppData\Local\Temp\DX9\SessionLauncher.exe [?]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 BrYNSvc;BrYNSvc;C:\Program Files (x86)\Browny02\BrYNSvc.exe [2014-10-16 249856]
S3 dmvsc;dmvsc;C:\Windows\System32\drivers\dmvsc.sys [2011-4-12 71168]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-12-10 114688]
S3 IntcDAud;Intel(R) Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2013-5-17 442368]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-5-11 822232]
S3 MBAMWebAccessControl;MBAMWebAccessControl;C:\Windows\System32\drivers\mwac.sys [2014-6-23 63704]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2013-11-15 19456]
S3 RoxMediaDB10;RoxMediaDB10;C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2008-6-4 1120752]
S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 27136]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2013-11-15 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2013-11-15 30208]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2013-10-31 1255736]
.
=============== Created Last 30 ================
.
2015-01-30 13:29:49   79064   ----a-w-   C:\Windows\System32\drivers\xvrmtal.sys
2015-01-29 14:26:34   --------   d-----w-   C:\Program Files (x86)\SHARP
2015-01-29 14:26:27   82432   ----a-w-   C:\Windows\System32\SN0ELMON.dll
2015-01-29 14:26:22   32768   ------w-   C:\Windows\SysWow64\_isusr2k.dll
2015-01-29 14:26:22   180320   ----a-w-   C:\Windows\_isusr32.dll
2015-01-29 14:26:18   93696   ----a-w-   C:\Windows\System32\SCN2PM.dll
2015-01-29 14:26:18   70144   ----a-w-   C:\Windows\System32\SCN2PMUI.dll
2015-01-29 14:26:18   58368   ----a-w-   C:\Windows\System32\SCN2PMR.dll
2015-01-29 14:25:42   --------   d-----w-   C:\Windows\SysWow64\SCDRV
2015-01-29 14:25:39   --------   d-----w-   C:\Drivers
2015-01-29 14:10:02   11870360   ----a-w-   C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{310A3B17-615F-44DD-BC87-B9A2CB170C6B}\mpengine.dll
2015-01-28 14:07:52   11870360   ----a-w-   C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-01-25 20:52:07   736952   ----a-w-   C:\ProgramData\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore-2\Microsoft.MediaCenter.Sports.UI.dll
2015-01-23 20:17:49   539984   ----a-w-   C:\ProgramData\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2015-01-22 23:28:30   1188440   ----a-w-   C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E7378B27-E69A-4EF1-A846-03EE42C636BD}\gapaengine.dll
2015-01-19 02:11:41   --------   d-----w-   C:\ProgramData\boost_interprocess
2015-01-19 02:07:32   --------   d-----w-   C:\Program Files (x86)\TradeStation 9.5
2015-01-19 02:06:28   --------   d-----w-   C:\Program Files\Microsoft SQL Server Compact Edition
2015-01-19 02:06:20   --------   d-----w-   C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-01-16 02:52:35   5553592   ----a-w-   C:\Windows\System32\ntoskrnl.exe
2015-01-16 02:52:35   503808   ----a-w-   C:\Windows\System32\srcore.dll
2015-01-16 02:52:35   50176   ----a-w-   C:\Windows\System32\srclient.dll
2015-01-16 02:52:35   43008   ----a-w-   C:\Windows\SysWow64\srclient.dll
2015-01-16 02:52:35   3971512   ----a-w-   C:\Windows\SysWow64\ntkrnlpa.exe
2015-01-16 02:52:35   3916728   ----a-w-   C:\Windows\SysWow64\ntoskrnl.exe
2015-01-16 02:52:35   296960   ----a-w-   C:\Windows\System32\rstrui.exe
2015-01-15 23:20:23   52224   ----a-w-   C:\Windows\SysWow64\nlaapi.dll
2015-01-15 23:20:23   303616   ----a-w-   C:\Windows\System32\nlasvc.dll
2015-01-15 23:20:23   156672   ----a-w-   C:\Windows\SysWow64\ncsi.dll
2015-01-15 23:20:21   144384   ----a-w-   C:\Windows\System32\ieUnatt.exe
2015-01-15 23:20:21   115712   ----a-w-   C:\Windows\SysWow64\ieUnatt.exe
2015-01-15 23:20:19   210432   ----a-w-   C:\Windows\System32\profsvc.dll
2015-01-15 23:20:15   62976   ----a-w-   C:\Windows\System32\TSWbPrxy.exe
2015-01-15 23:20:13   141312   ----a-w-   C:\Windows\System32\drivers\mrxdav.sys
2015-01-09 15:03:09   --------   d-----w-   C:\SUPERDelete
2015-01-09 15:01:15   --------   d-----w-   C:\Users\Phyllis\AppData\Roaming\SUPERAntiSpyware.com
2015-01-09 15:01:12   --------   d-----w-   C:\ProgramData\SUPERAntiSpyware.com
2015-01-09 15:01:12   --------   d-----w-   C:\Program Files\SUPERAntiSpyware
2015-01-05 22:04:00   736952   ----a-w-   C:\ProgramData\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore\Microsoft.MediaCenter.Sports.UI.dll
2015-01-05 22:03:45   2876528   ----a-w-   C:\ProgramData\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2015-01-05 22:03:37   42168   ----a-w-   C:\ProgramData\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2015-01-05 22:03:34   539984   ----a-w-   C:\ProgramData\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
.
==================== Find3M  ====================
.
2015-01-30 09:13:17   129752   ----a-w-   C:\Windows\System32\drivers\MBAMSwissArmy.sys
2015-01-25 11:47:08   71344   ----a-w-   C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2015-01-25 11:47:08   701616   ----a-w-   C:\Windows\SysWow64\FlashPlayerApp.exe
2015-01-14 19:10:48   107392   ----a-w-   C:\Windows\System32\LMIRfsClientNP.dll
2015-01-14 19:10:47   92520   ----a-w-   C:\Windows\System32\LMIinit.dll
2015-01-14 19:10:47   35688   ----a-w-   C:\Windows\System32\LMIport.dll
2014-12-31 11:14:31   298120   ------w-   C:\Windows\System32\MpSigStub.exe
2014-12-27 00:16:15   32832   ----a-w-   C:\Windows\SysWow64\rnd_chunk.bin
2014-12-11 17:29:54   367200   ----a-w-   C:\Windows\System32\drivers\afcdp.sys
2014-12-11 17:29:53   1464096   ----a-w-   C:\Windows\System32\drivers\tdrpman.sys
2014-12-11 17:29:52   269600   ----a-w-   C:\Windows\System32\drivers\snapman.sys
2014-12-11 17:29:52   198432   ----a-w-   C:\Windows\System32\drivers\tib_mounter.sys
2014-12-11 17:29:52   161568   ----a-w-   C:\Windows\System32\drivers\vididr.sys
2014-12-11 17:29:52   117024   ----a-w-   C:\Windows\System32\drivers\vidsflt.sys
2014-12-11 17:29:52   1120032   ----a-w-   C:\Windows\System32\drivers\tib.sys
2014-12-11 17:29:51   116000   ----a-w-   C:\Windows\System32\drivers\fltsrv.sys
2014-11-25 15:18:44   505416   ----a-w-   C:\Windows\SysWow64\msvcp71.dll
2014-11-25 15:18:44   353864   ----a-w-   C:\Windows\SysWow64\msvcr71.dll
2014-11-22 03:06:23   2724864   ----a-w-   C:\Windows\System32\mshtml.tlb
2014-11-22 03:06:11   4096   ----a-w-   C:\Windows\System32\ieetwcollectorres.dll
2014-11-22 02:50:39   66560   ----a-w-   C:\Windows\System32\iesetup.dll
2014-11-22 02:50:10   580096   ----a-w-   C:\Windows\System32\vbscript.dll
2014-11-22 02:49:54   48640   ----a-w-   C:\Windows\System32\ieetwproxystub.dll
2014-11-22 02:48:20   88064   ----a-w-   C:\Windows\System32\MshtmlDac.dll
2014-11-22 02:35:29   114688   ----a-w-   C:\Windows\System32\ieetwcollector.exe
2014-11-22 02:34:51   814080   ----a-w-   C:\Windows\System32\jscript9diag.dll
2014-11-22 02:34:07   6039552   ----a-w-   C:\Windows\System32\jscript9.dll
2014-11-22 02:26:31   968704   ----a-w-   C:\Windows\System32\MsSpellCheckingFacility.exe
2014-11-22 02:20:44   2724864   ----a-w-   C:\Windows\SysWow64\mshtml.tlb
2014-11-22 02:14:16   77824   ----a-w-   C:\Windows\System32\JavaScriptCollectionAgent.dll
2014-11-22 02:07:43   501248   ----a-w-   C:\Windows\SysWow64\vbscript.dll
2014-11-22 02:07:17   62464   ----a-w-   C:\Windows\SysWow64\iesetup.dll
2014-11-22 02:06:32   47616   ----a-w-   C:\Windows\SysWow64\ieetwproxystub.dll
2014-11-22 02:05:02   64000   ----a-w-   C:\Windows\SysWow64\MshtmlDac.dll
2014-11-22 01:54:30   620032   ----a-w-   C:\Windows\SysWow64\jscript9diag.dll
2014-11-22 01:47:10   1359360   ----a-w-   C:\Windows\System32\mshtmlmedia.dll
2014-11-22 01:46:58   2125312   ----a-w-   C:\Windows\System32\inetcpl.cpl
2014-11-22 01:40:04   60416   ----a-w-   C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
2014-11-22 01:29:26   4299264   ----a-w-   C:\Windows\SysWow64\jscript9.dll
2014-11-22 01:28:21   2358272   ----a-w-   C:\Windows\System32\wininet.dll
2014-11-22 01:22:49   2052096   ----a-w-   C:\Windows\SysWow64\inetcpl.cpl
2014-11-22 01:21:57   1155072   ----a-w-   C:\Windows\SysWow64\mshtmlmedia.dll
2014-11-22 01:00:20   1888256   ----a-w-   C:\Windows\SysWow64\wininet.dll
2014-11-21 11:14:22   63704   ----a-w-   C:\Windows\System32\drivers\mwac.sys
2014-11-21 11:14:12   93400   ----a-w-   C:\Windows\System32\drivers\mbamchameleon.sys
2014-11-21 11:14:08   25816   ----a-w-   C:\Windows\System32\drivers\mbam.sys
2014-11-19 09:31:16   1217192   ----a-w-   C:\Windows\SysWow64\FM20.DLL
2014-11-11 03:09:06   1424384   ----a-w-   C:\Windows\System32\WindowsCodecs.dll
2014-11-11 03:08:52   241152   ----a-w-   C:\Windows\System32\pku2u.dll
2014-11-11 03:08:48   728064   ----a-w-   C:\Windows\System32\kerberos.dll
2014-11-11 02:44:45   1230336   ----a-w-   C:\Windows\SysWow64\WindowsCodecs.dll
2014-11-11 02:44:32   186880   ----a-w-   C:\Windows\SysWow64\pku2u.dll
2014-11-11 02:44:25   550912   ----a-w-   C:\Windows\SysWow64\kerberos.dll
2014-11-11 01:46:26   119296   ----a-w-   C:\Windows\System32\drivers\tdx.sys
2014-11-08 03:16:08   2048   ----a-w-   C:\Windows\System32\tzres.dll
2014-11-08 02:45:09   2048   ----a-w-   C:\Windows\SysWow64\tzres.dll
2014-11-04 11:42:35   107392   ----a-w-   C:\Windows\System32\LMIRfsClientNP.dll.000.bak
.
============= FINISH:  8:36:31.60 ===============
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 10/30/2013 6:58:57 PM
System Uptime: 1/29/2015 10:49:32 PM (10 hours ago)
.
Motherboard: ASUSTeK COMPUTER INC. |  | Z87-PLUS
Processor: Intel(R) Core(TM) i7-4770 CPU @ 3.40GHz | SOCKET 1150 | 3401/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 238 GiB total, 56.627 GiB free.
D: is CDROM ()
Y: is NetworkDisk (NTFS) - 3663 GiB total, 2110.596 GiB free.
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP198: 1/22/2015 6:28:12 PM - Windows Update
RP199: 1/23/2015 7:34:32 AM - Windows Update
RP200: 1/26/2015 9:10:47 AM - Windows Update
RP201: 1/29/2015 9:25:43 AM - Installed SHARP MX/DX Series Printer Driver
.
==== Installed Programs ======================
.
Acronis True Image 2014
Adobe Flash Player 16 ActiveX
Adobe Flash Player 16 NPAPI
Adobe Reader XI (11.0.10)
Adobe Refresh Manager
AMD Accelerated Video Transcoding
AMD Catalyst Install Manager
AMD Drag and Drop Transcoding
AMD Media Foundation Decoders
Applian Director
Asmedia ASM106x SATA Host Controller Driver
Brother HL-5250DN
Catalyst Control Center
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-utility64
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
CCleaner
Cisco WebEx Meetings
Citrix Online Launcher
Codec Pack Packages
Corel PaintShop Pro X6
Creative Content
CrystalDiskMark 3.0.2f
DC-Bass Source 1.3.0
Definition Update for Microsoft Office 2010 (KB2910899) 32-Bit Edition
DirectVobSub 2.40.4209
DirectXInstallService
DivX Setup
Dropbox
EMCGadgets64
ffdshow
ffdshow v1.1.4399 [2012-03-22]
File Download ActiveX
File Type Assistant
Free Picture Resizer version 1.0.1.2
Fuze Meeting
FXCM MetaTrader 4
FXCM Trading Station
Google Chrome
Google Update Helper
GoToMeeting 6.4.11.2273
Haali Media Splitter
HL-5450DN
Hubb Client Data Manager
IBFX MT4
ICA
Integrated Investor
Intel(R) Management Engine Components
Intel(R) Network Connections 18.1.59.0
Intel(R) Processor Graphics
Intel(R) Rapid Storage Technology
Intel(R) SDK for OpenCL - CPU Only Runtime Package
Intel(R) USB 3.0 eXtensible Host Controller Driver
Intel® Trusted Connect Service Client
IPM_PSP_COM64
iSEEK AnswerWorks English Runtime
Java 7 Update 71
Java Auto Updater
Lagarith Lossless Codec (1.3.27)
LAME v3.99.3 (for Windows)
LogMeIn
Malwarebytes Anti-Malware version 2.0.4.1028
Microsoft .NET Framework 4.5.1
Microsoft Office Access MUI (English) 2010
Microsoft Office Access Setup Metadata MUI (English) 2010
Microsoft Office Excel MUI (English) 2010
Microsoft Office Home and Business 2010
Microsoft Office Office 64-bit Components 2010
Microsoft Office OneNote MUI (English) 2010
Microsoft Office Outlook MUI (English) 2010
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2010
Microsoft Office Publisher MUI (English) 2010
Microsoft Office Shared 64-bit MUI (English) 2010
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Single Image 2010
Microsoft Office Word MUI (English) 2010
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft SQL Server Compact 4.0 x64 ENU
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
Moyea FLV Player version 1.6.2.2
Mozilla Firefox 35.0.1 (x86 en-US)
Mozilla Maintenance Service
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MySpeed v5.4.4
NEW HAMPSHIRE ASSOCIATION REALTORS FORMS
Nitro Reader 3
OpenSource Flash Video Splitter 1.0.0.5
PipStrider III
PrimoPDF -- brought to you by Nitro PDF Software
PSPPContent
PSPPHelp
PSPPro64
Quicken 2012
Quicken WillMaker Plus 2012
RealDownloader
RealNetworks - Microsoft Visual C++ 2008 Runtime
RealNetworks - Microsoft Visual C++ 2010 Runtime
RealPlayer Cloud
Realtek High Definition Audio Driver
RealUpgrade 1.1
Replay Converter 4
Replay Media Splitter 2.2.1305.22
Replay Music 5
Replay Telecorder for Skype 1.3.0.21
Replay Video Capture 7
Roxio Central Audio
Roxio Central Copy
Roxio Central Core
Roxio Central Data
Roxio Central Tools
Roxio RecordNow 10 Music Lab
Roxio Update Manager
Samsung Magician
Search App by Ask
Security Update for Microsoft .NET Framework 4.5.1 (KB2894854v2)
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)
Security Update for Microsoft .NET Framework 4.5.1 (KB2972107)
Security Update for Microsoft .NET Framework 4.5.1 (KB2972216)
Security Update for Microsoft .NET Framework 4.5.1 (KB2978128)
Security Update for Microsoft .NET Framework 4.5.1 (KB2979578v2)
Security Update for Microsoft Excel 2010 (KB2910902) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553154) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2810073) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2880971) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2881071) 32-Bit Edition
Security Update for Microsoft Word 2010 (KB2899519) 32-Bit Edition
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
Setup
SHARP MX/DX Series PCL/PS Printer Driver
ShopAtHome.com BrowserAppCore Service Chrome
Skype Click to Call
Skype™ 6.18
Sonic CinePlayer Decoder Pack
SUPERAntiSpyware
TeamViewer 9
thinkorswim
Top Producer Outlook Sync
TradeStation 9.1
TradeStation 9.5
TTM Squeeze 2.2
TTM Squeeze Radar 3.2
TTM Voodoo Lines
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
Update for Microsoft Excel 2010 (KB2589348) 32-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553140) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589386) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597089) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687275) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition
Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition
Update for Microsoft Office 2010 (KB2837602) 32-Bit Edition
Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition
Update for Microsoft Office 2010 (KB2883019) 32-Bit Edition
Update for Microsoft Office 2010 (KB2889818) 32-Bit Edition
Update for Microsoft Office 2010 (KB2889828) 32-Bit Edition
Update for Microsoft Office 2010 (KB2910896) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2597088) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2880517) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition
UpdateService
VC_CRT_x64
VC80CRTRedist - 8.0.50727.6195
VD64Inst
VectorVest 7
Video Downloader
Video Padlock
VisualTour Studio
VT Remote Support
WinPcap 4.1.3
Xvid Video Codec
zipForm6
.
==== Event Viewer Messages From Past Week ========
.
1/29/2015 10:49:44 PM, Error: Service Control Manager [7000]  - The SessionLauncher service failed to start due to the following error:  The system cannot find the file specified.
1/28/2015 7:29:43 AM, Error: Schannel [36888]  - The following fatal alert was generated: 70. The internal error state is 105.
1/25/2015 8:58:23 AM, Error: Microsoft-Windows-DistributedCOM [10016]  - The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID  {C97FCC79-E628-407D-AE68-A06AD6D8B4D1}  and APPID  {344ED43D-D086-4961-86A6-1106F4ACAD9B}  to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
.
==== End Of File ===========================

Perhaps I'm feeling spooked after the recent situation with my email ...  This virus was NOT found by SUPERAntiSpyware Free edition, and then was found immediatley after by MalawareBytes.   Please let me know if I still have a problem.  My understanding is that this could be serious and so I want to double-check.   Thanks!


...OMG  Just realized that yesterday, I got a pop up on my computer tellingme to download a new version of SUPERAntiSpyware and I did that:  It shows publisher as SUPERAntiSpyware.com   48.8 MB  Version 6.01168.  It has updated since (before running the scan in which it did not detect the Trojans).  Should I delete that program from my computer and reinstall it directly from their website?

Followed all the instructions carefully; think I've got it all here:
Uninstalled SuperAntiSpyware using GeekUninstaller; followed instructions to show Hidden Files; backed up Registry using ERUNT; MalawareBytes Threat Scan run; there were no detections; not sure if this is the correct log; the one I saved to TXT disappeared, so I went back into Application Logs to find it:

Malwarebytes Anti-Malware
www.malwarebytes.org


Detection, 1/30/2015 12:34:14 AM, SYSTEM, PHYLLIS-PC, Protection, Malware Protection, File, Trojan.Agent.ED, C:\Program Files (x86)\FXCM MetaTrader 4\terminal.exe, Quarantine, [1f6a74892564a2941962976bdc2610f0]
Update, 1/30/2015 4:13:17 AM, SYSTEM, PHYLLIS-PC, Scheduler, Malware Database, 2015.1.30.1, 2015.1.30.3,
Scan, 1/30/2015 8:30:10 AM, SYSTEM, PHYLLIS-PC, Manual, Start:1/30/2015 12:10:01 AM, Duration:7 min 34 sec, Threat Scan, Completed, 2 Malware Detections, 0 Non-Malware Detections,
Protection, 1/30/2015 8:36:17 AM, SYSTEM, PHYLLIS-PC, Protection, Malware Protection, Stopping,
Protection, 1/30/2015 8:36:18 AM, SYSTEM, PHYLLIS-PC, Protection, Malware Protection, Stopped,
Protection, 1/30/2015 8:36:18 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Stopping,
Protection, 1/30/2015 8:36:19 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Stopped,
Protection, 1/30/2015 8:42:26 AM, SYSTEM, PHYLLIS-PC, Protection, Malware Protection, Starting,
Protection, 1/30/2015 8:42:26 AM, SYSTEM, PHYLLIS-PC, Protection, Malware Protection, Started,
Protection, 1/30/2015 8:42:26 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Starting,
Protection, 1/30/2015 8:42:30 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Started,
Update, 1/30/2015 10:28:08 AM, SYSTEM, PHYLLIS-PC, Scheduler, Malware Database, 2015.1.30.3, 2015.1.30.5,
Protection, 1/30/2015 10:28:08 AM, SYSTEM, PHYLLIS-PC, Protection, Refresh, Starting,
Protection, 1/30/2015 10:28:09 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Stopping,
Protection, 1/30/2015 10:28:09 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Stopped,
Protection, 1/30/2015 10:28:14 AM, SYSTEM, PHYLLIS-PC, Protection, Refresh, Success,
Protection, 1/30/2015 10:28:14 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Starting,
Protection, 1/30/2015 10:28:14 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Started,
Scan, 1/30/2015 10:36:59 AM, SYSTEM, PHYLLIS-PC, Manual, Start:1/30/2015 10:28:09 AM, Duration:8 min 3 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections,
Update, 1/30/2015 11:34:42 AM, SYSTEM, PHYLLIS-PC, Manual, Malware Database, 2015.1.30.5, 2015.1.30.6,
Protection, 1/30/2015 11:34:42 AM, SYSTEM, PHYLLIS-PC, Protection, Refresh, Starting,
Protection, 1/30/2015 11:34:42 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Stopping,
Protection, 1/30/2015 11:34:42 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Stopped,
Protection, 1/30/2015 11:34:45 AM, SYSTEM, PHYLLIS-PC, Protection, Refresh, Success,
Protection, 1/30/2015 11:34:45 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Starting,
Protection, 1/30/2015 11:34:46 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Started,
Scan, 1/30/2015 11:42:42 AM, SYSTEM, PHYLLIS-PC, Manual, Start:1/30/2015 11:35:41 AM, Duration:6 min 16 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections,
Protection, 1/30/2015 11:52:44 AM, SYSTEM, PHYLLIS-PC, Protection, Malware Protection, Starting,
Protection, 1/30/2015 11:52:44 AM, SYSTEM, PHYLLIS-PC, Protection, Malware Protection, Started,
Protection, 1/30/2015 11:52:44 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Starting,
Protection, 1/30/2015 11:52:46 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Started,
Protection, 1/30/2015 11:56:06 AM, SYSTEM, PHYLLIS-PC, Protection, Malware Protection, Stopping,
Protection, 1/30/2015 11:56:06 AM, SYSTEM, PHYLLIS-PC, Protection, Malware Protection, Stopped,
Protection, 1/30/2015 11:56:07 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Stopping,
Protection, 1/30/2015 11:56:07 AM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Stopped,
Protection, 1/30/2015 12:09:21 PM, SYSTEM, PHYLLIS-PC, Protection, Malware Protection, Starting,
Protection, 1/30/2015 12:09:21 PM, SYSTEM, PHYLLIS-PC, Protection, Malware Protection, Started,
Protection, 1/30/2015 12:09:21 PM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Starting,
Protection, 1/30/2015 12:09:21 PM, SYSTEM, PHYLLIS-PC, Protection, Malicious Website Protection, Started,

(end)

Adware Cleaner:
# AdwCleaner v4.109 - Report created 30/01/2015 at 11:51:58
# Updated 24/01/2015 by Xplode
# Database : 2015-01-26.1 [Live]
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Phyllis - PHYLLIS-PC
# Running from : C:\Users\Phyllis\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AskPartnerNetwork
Folder Deleted : C:\Program Files (x86)\AskPartnerNetwork
Folder Deleted : C:\Users\Phyllis\AppData\Local\Temp\apn
Folder Deleted : C:\Users\Phyllis\AppData\Local\Temp\webget
Folder Deleted : C:\Users\Phyllis\AppData\Local\AskPartnerNetwork
Folder Deleted : C:\Users\Phyllis\AppData\Local\PackageAware
Folder Deleted : C:\Users\Phyllis\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
Folder Deleted : C:\Users\Phyllis\AppData\Roaming\DigitalSites
File Deleted : C:\Users\Phyllis\AppData\Roaming\Mozilla\Firefox\Profiles\3hyawouq.default-1384237558205\invalidprefs.js
File Deleted : C:\Users\Phyllis\AppData\Roaming\Mozilla\Firefox\Profiles\3hyawouq.default-1384237558205\searchplugins\ask-search.xml
File Deleted : C:\Users\Phyllis\AppData\Roaming\Mozilla\Firefox\Profiles\3hyawouq.default-1384237558205\searchplugins\bingp.xml
File Deleted : C:\Users\Phyllis\AppData\Roaming\Mozilla\Firefox\Profiles\3hyawouq.default-1384237558205\user.js
File Deleted : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.ask.com_0.localstorage
File Deleted : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.ask.com_0.localstorage-journal
File Deleted : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_services.hearstmags.com_0.localstorage-journal
File Deleted : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
File Deleted : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_services.hearstmags.com_0.localstorage
File Deleted : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [BrowserAppCoreService]
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0B79C149-3B19-40DE-92BF-1A3AD9C1DA9D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{229C56BB-A36A-4323-8C82-B136DF45697D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{33E2B3CB-322E-4CBE-89F2-C06F5A35DB46}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{51080E66-F357-4F2A-9BFC-2456695883B5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{537AD3CF-DE2B-4A1C-8279-C946B7E490D4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5BF7365D-25FF-40F3-8DEE-06ABEDF177CC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A10A1344-B533-4C9E-BE4E-4C5BC4953047}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BA94BCE1-7E60-422D-9E7D-B853BC03FE78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D0F1E414-1FAE-466C-B122-DE735B7BFF9D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E458510C-1DD5-4A05-8C4C-53BEF69C05E7}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKCU\Software\AskPartnerNetwork
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\SOFTWARE\AskPartnerNetwork
Key Deleted : HKLM\SOFTWARE\InstallCore
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Codec Pack Packages
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trusted Software Assistant_is1
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v35.0.1 (x86 en-US)

[3hyawouq.default-1384237558205\prefs.js] - Line Deleted : user_pref("browser.search.selectedEngine", "Vosteran");
[3hyawouq.default-1384237558205\prefs.js] - Line Deleted : user_pref("extensions.srchvstrn.hmpgUrl", "hxxp://Vosteran.com/?f=1&a=vst_dnldkng_14_52_ff&cd=2XzuyEtN2Y1L1QzuyByE0DtDtB0BzyyDyE0DyEtAyDzyyEyCtN0D0Tzu0StCtDzytDtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzy[...]
[3hyawouq.default-1384237558205\prefs.js] - Line Deleted : user_pref("extensions.srchvstrn.newTabUrl", "hxxp://Vosteran.com/?f=2&a=vst_dnldkng_14_52_ff&cd=2XzuyEtN2Y1L1QzuyByE0DtDtB0BzyyDyE0DyEtAyDzyyEyCtN0D0Tzu0StCtDzytDtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtB[...]
[3hyawouq.default-1384237558205\prefs.js] - Line Deleted : user_pref("extensions.srchvstrn.prtnrId", "WSE_Vosteran");
[3hyawouq.default-1384237558205\prefs.js] - Line Deleted : user_pref("extensions.srchvstrn.srchPrvdr", "Vosteran");
[3hyawouq.default-1384237558205\prefs.js] - Line Deleted : user_pref("extensions.srchvstrn.tlbrSrchUrl", "hxxp://Vosteran.com/?f=3&a=vst_dnldkng_14_52_ff&cd=2XzuyEtN2Y1L1QzuyByE0DtDtB0BzyyDyE0DyEtAyDzyyEyCtN0D0Tzu0StCtDzytDtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyE[...]
[3hyawouq.default-1384237558205\prefs.js] - Line Deleted : user_pref("extensions.xpiState", "{\"app-profile\":{\"LogMeInClient@logmein.com\":{\"d\":\"C:\\\\Users\\\\Phyllis\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\3hyawouq.default-1384237558[...]

-\\ Google Chrome v40.0.2214.93


*************************

AdwCleaner[R0].txt - [6457 octets] - [30/01/2015 11:49:43]
AdwCleaner[S0].txt - [6375 octets] - [30/01/2015 11:51:58]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6435 octets] ##########

# AdwCleaner v4.109 - Report created 30/01/2015 at 11:49:43
# Updated 24/01/2015 by Xplode
# Database : 2015-01-26.1 [Live]
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Phyllis - PHYLLIS-PC
# Running from : C:\Users\Phyllis\Desktop\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_services.hearstmags.com_0.localstorage
File Found : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_services.hearstmags.com_0.localstorage-journal
File Found : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.ask.com_0.localstorage
File Found : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.ask.com_0.localstorage-journal
File Found : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Found : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Found : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal
File Found : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
File Found : C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
File Found : C:\Users\Phyllis\AppData\Roaming\Mozilla\Firefox\Profiles\3hyawouq.default-1384237558205\invalidprefs.js
File Found : C:\Users\Phyllis\AppData\Roaming\Mozilla\Firefox\Profiles\3hyawouq.default-1384237558205\searchplugins\ask-search.xml
File Found : C:\Users\Phyllis\AppData\Roaming\Mozilla\Firefox\Profiles\3hyawouq.default-1384237558205\searchplugins\bingp.xml
File Found : C:\Users\Phyllis\AppData\Roaming\Mozilla\Firefox\Profiles\3hyawouq.default-1384237558205\user.js
Folder Found : C:\Program Files (x86)\AskPartnerNetwork
Folder Found : C:\ProgramData\AskPartnerNetwork
Folder Found : C:\Users\Phyllis\AppData\Local\AskPartnerNetwork
Folder Found : C:\Users\Phyllis\AppData\Local\PackageAware
Folder Found : C:\Users\Phyllis\AppData\Local\Temp\apn
Folder Found : C:\Users\Phyllis\AppData\Local\Temp\webget
Folder Found : C:\Users\Phyllis\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
Folder Found : C:\Users\Phyllis\AppData\Roaming\DigitalSites

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Found : HKCU\Software\AskPartnerNetwork
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Codec Pack Packages
Key Found : [x64] HKCU\Software\AskPartnerNetwork
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Found : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Found : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Found : HKLM\SOFTWARE\AskPartnerNetwork
Key Found : HKLM\SOFTWARE\Classes\CLSID\{0B79C149-3B19-40DE-92BF-1A3AD9C1DA9D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{229C56BB-A36A-4323-8C82-B136DF45697D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{33E2B3CB-322E-4CBE-89F2-C06F5A35DB46}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{51080E66-F357-4F2A-9BFC-2456695883B5}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{537AD3CF-DE2B-4A1C-8279-C946B7E490D4}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5BF7365D-25FF-40F3-8DEE-06ABEDF177CC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A10A1344-B533-4C9E-BE4E-4C5BC4953047}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{BA94BCE1-7E60-422D-9E7D-B853BC03FE78}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D0F1E414-1FAE-466C-B122-DE735B7BFF9D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E458510C-1DD5-4A05-8C4C-53BEF69C05E7}
Key Found : HKLM\SOFTWARE\InstallCore
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trusted Software Assistant_is1
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [BrowserAppCoreService]

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v35.0.1 (x86 en-US)

[3hyawouq.default-1384237558205] - Line Found : user_pref("browser.search.selectedEngine", "Vosteran");
[3hyawouq.default-1384237558205] - Line Found : user_pref("extensions.srchvstrn.hmpgUrl", "hxxp://Vosteran.com/?f=1&a=vst_dnldkng_14_52_ff&cd=2XzuyEtN2Y1L1QzuyByE0DtDtB0BzyyDyE0DyEtAyDzyyEyCtN0D0Tzu0StCtDzytDtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzy[...]
[3hyawouq.default-1384237558205] - Line Found : user_pref("extensions.srchvstrn.newTabUrl", "hxxp://Vosteran.com/?f=2&a=vst_dnldkng_14_52_ff&cd=2XzuyEtN2Y1L1QzuyByE0DtDtB0BzyyDyE0DyEtAyDzyyEyCtN0D0Tzu0StCtDzytDtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtB[...]
[3hyawouq.default-1384237558205] - Line Found : user_pref("extensions.srchvstrn.prtnrId", "WSE_Vosteran");
[3hyawouq.default-1384237558205] - Line Found : user_pref("extensions.srchvstrn.srchPrvdr", "Vosteran");
[3hyawouq.default-1384237558205] - Line Found : user_pref("extensions.srchvstrn.tlbrSrchUrl", "hxxp://Vosteran.com/?f=3&a=vst_dnldkng_14_52_ff&cd=2XzuyEtN2Y1L1QzuyByE0DtDtB0BzyyDyE0DyEtAyDzyyEyCtN0D0Tzu0StCtDzytDtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyE[...]
[3hyawouq.default-1384237558205] - Line Found : user_pref("extensions.xpiState", "{\"app-profile\":{\"LogMeInClient@logmein.com\":{\"d\":\"C:\\\\Users\\\\Phyllis\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\3hyawouq.default-1384237558[...]

-\\ Google Chrome v40.0.2214.93


*************************

AdwCleaner[R0].txt - [6301 octets] - [30/01/2015 11:49:43]


Junkware Removal:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.1 (12.28.2014:1)
OS: Windows 7 Professional x64
Ran by Phyllis on Fri 01/30/2015 at 11:58:51.01
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\update swift browse
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\util swift browse



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Phyllis\AppData\Roaming\mozilla\firefox\profiles\3hyawouq.default-1384237558205\minidumps [3 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Fri 01/30/2015 at 12:01:19.26
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
The Farber Recovery Scan was too long to be included; see next post.

The Addition.txt is attached.

continued: FRST.txt/


(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-30 12:02 - 2014-11-02 10:26 - 00000000 ____D () C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service
2015-01-30 12:02 - 2013-10-31 08:00 - 02091432 _____ () C:\Windows\WindowsUpdate.log
2015-01-30 11:59 - 2009-07-13 23:45 - 00022096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-30 11:59 - 2009-07-13 23:45 - 00022096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-30 11:57 - 2009-07-14 00:13 - 00789712 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-30 11:53 - 2013-12-06 09:20 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-30 11:53 - 2013-11-04 16:55 - 00000000 ____D () C:\Users\Phyllis\AppData\Roaming\Nitro PDF
2015-01-30 11:53 - 2013-11-04 15:39 - 00000000 ___RD () C:\Users\Phyllis\Dropbox
2015-01-30 11:53 - 2013-11-04 15:35 - 00000000 ____D () C:\Users\Phyllis\AppData\Roaming\Dropbox
2015-01-30 11:52 - 2014-06-23 19:15 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-30 11:52 - 2014-01-28 18:29 - 00001004 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Client.lnk
2015-01-30 11:52 - 2014-01-28 18:29 - 00000988 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Control Panel.lnk
2015-01-30 11:52 - 2013-11-11 01:03 - 00657818 _____ () C:\Windows\PFRO.log
2015-01-30 11:52 - 2013-11-10 09:44 - 00016524 _____ () C:\Windows\setupact.log
2015-01-30 11:52 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-30 11:51 - 2014-02-25 19:00 - 00000574 _____ () C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-4249353033-2772040276-2529461727-1000.job
2015-01-30 11:47 - 2013-11-09 15:16 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-30 11:06 - 2014-06-20 06:15 - 00000000 ____D () C:\Users\Phyllis\AppData\Local\Deployment
2015-01-30 11:06 - 2013-11-05 10:45 - 00000000 ____D () C:\Users\Phyllis\Documents\Outlook Files
2015-01-30 11:04 - 2013-12-06 09:20 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-30 08:42 - 2014-05-05 11:16 - 00000000 ____D () C:\Windows\Applian Director
2015-01-30 03:54 - 2013-11-12 15:37 - 00000000 ____D () C:\ProgramData\LogMeIn
2015-01-30 00:34 - 2014-09-06 15:21 - 00000000 ____D () C:\Program Files (x86)\FXCM MetaTrader 4
2015-01-29 22:49 - 2011-04-12 03:28 - 00000000 ____D () C:\Windows\ShellNew
2015-01-29 18:40 - 2013-11-04 15:25 - 00000000 ____D () C:\Users\Phyllis\AppData\Local\CrashDumps
2015-01-29 10:59 - 2013-11-09 13:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-29 09:27 - 2013-11-04 09:29 - 00000000 ____D () C:\Users\Phyllis\AppData\Roaming\PrimoPDF
2015-01-29 09:25 - 2013-10-30 17:44 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-28 13:28 - 2014-02-25 19:00 - 00003608 _____ () C:\Windows\System32\Tasks\G2MUpdateTask-S-1-5-21-4249353033-2772040276-2529461727-1000
2015-01-27 21:49 - 2013-11-04 11:59 - 00000000 ____D () C:\Users\Phyllis\.thinkorswim
2015-01-27 21:49 - 2013-11-04 11:59 - 00000000 ____D () C:\Program Files (x86)\thinkorswim
2015-01-27 12:05 - 2013-11-03 17:33 - 00000000 ____D () C:\Users\Phyllis\AppData\Roaming\Replay Video Capture 7
2015-01-27 10:17 - 2014-05-05 09:04 - 00003348 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4249353033-2772040276-2529461727-1000
2015-01-27 10:17 - 2014-05-05 09:04 - 00003218 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4249353033-2772040276-2529461727-1000
2015-01-26 08:51 - 2013-11-04 08:52 - 00000404 _____ () C:\Windows\Tasks\EasyShare Registration Task.job
2015-01-25 06:47 - 2013-11-09 15:16 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-25 06:47 - 2013-10-31 16:30 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-25 06:47 - 2013-10-31 16:30 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-23 07:37 - 2013-10-31 20:19 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-23 07:34 - 2013-10-31 20:19 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-19 11:27 - 2013-11-05 19:06 - 00000000 ____D () C:\Users\Phyllis\AppData\Local\TradeStation_Technologies
2015-01-16 23:15 - 2013-11-12 10:32 - 1117614659 _____ () C:\Windows\DYNAZIP.LOG
2015-01-15 14:43 - 2013-11-04 09:08 - 00000000 ____D () C:\ProgramData\VisualTour
2015-01-14 14:11 - 2013-11-12 15:37 - 00000000 ____D () C:\Program Files (x86)\LogMeIn
2015-01-14 14:10 - 2013-11-12 15:37 - 00107392 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIRfsClientNP.dll
2015-01-14 14:10 - 2013-11-12 15:37 - 00092520 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIinit.dll
2015-01-14 14:10 - 2013-11-12 15:37 - 00035688 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIport.dll
2015-01-13 16:07 - 2013-11-04 09:01 - 00000000 ____D () C:\Program Files (x86)\vtstudio
2015-01-11 21:28 - 2013-11-06 15:19 - 00598672 _____ () C:\Windows\SysWOW64\45.cht
2015-01-11 21:28 - 2013-11-06 15:09 - 00385236 _____ () C:\Windows\SysWOW64\44.cht
2015-01-11 21:28 - 2013-11-06 15:09 - 00115676 _____ () C:\Windows\SysWOW64\43.cht
2015-01-11 21:28 - 2013-11-06 14:51 - 00902860 _____ () C:\Windows\SysWOW64\41.cht
2015-01-11 21:28 - 2013-11-06 14:51 - 00095804 _____ () C:\Windows\SysWOW64\42.cht
2015-01-11 21:28 - 2013-11-04 17:14 - 00668264 _____ () C:\Windows\SysWOW64\40.cht
2015-01-11 21:27 - 2013-11-04 17:14 - 01774272 _____ () C:\Windows\SysWOW64\37.cht
2015-01-11 21:27 - 2013-11-04 17:14 - 00668264 _____ () C:\Windows\SysWOW64\38.cht
2015-01-11 21:27 - 2013-11-04 17:14 - 00385236 _____ () C:\Windows\SysWOW64\39.cht
2015-01-11 21:26 - 2013-11-04 17:14 - 01246892 _____ () C:\Windows\SysWOW64\35.cht
2015-01-11 21:26 - 2013-11-04 17:14 - 01186760 _____ () C:\Windows\SysWOW64\36.cht
2015-01-11 21:26 - 2013-11-04 17:14 - 00551272 _____ () C:\Windows\SysWOW64\34.cht
2015-01-11 21:26 - 2013-11-04 10:52 - 00089420 _____ () C:\Windows\SysWOW64\33.cht
2015-01-11 21:24 - 2013-11-04 10:52 - 01254220 _____ () C:\Windows\SysWOW64\30.cht
2015-01-11 21:24 - 2013-11-04 10:52 - 00902860 _____ () C:\Windows\SysWOW64\25.cht
2015-01-11 21:24 - 2013-11-04 10:52 - 00552360 _____ () C:\Windows\SysWOW64\27.cht
2015-01-11 21:24 - 2013-11-04 10:52 - 00516220 _____ () C:\Windows\SysWOW64\28.cht
2015-01-11 21:24 - 2013-11-04 10:52 - 00440004 _____ () C:\Windows\SysWOW64\29.cht
2015-01-11 21:24 - 2013-11-04 10:52 - 00132844 _____ () C:\Windows\SysWOW64\26.cht
2015-01-11 21:24 - 2013-11-04 10:52 - 00095804 _____ () C:\Windows\SysWOW64\32.cht
2015-01-11 21:24 - 2013-11-04 10:52 - 00092804 _____ () C:\Windows\SysWOW64\31.cht
2015-01-11 21:23 - 2013-11-04 10:52 - 00902860 _____ () C:\Windows\SysWOW64\22.cht
2015-01-11 21:23 - 2013-11-04 10:52 - 00516220 _____ () C:\Windows\SysWOW64\24.cht
2015-01-11 21:23 - 2013-11-04 10:52 - 00115676 _____ () C:\Windows\SysWOW64\21.cht
2015-01-11 21:23 - 2013-11-04 10:52 - 00098488 _____ () C:\Windows\SysWOW64\23.cht
2015-01-11 21:23 - 2013-11-04 10:51 - 00350112 _____ () C:\Windows\SysWOW64\20.cht
2015-01-11 21:22 - 2013-11-04 10:51 - 01774272 _____ () C:\Windows\SysWOW64\16.cht
2015-01-11 21:22 - 2013-11-04 10:51 - 01186760 _____ () C:\Windows\SysWOW64\19.cht
2015-01-11 21:22 - 2013-11-04 10:51 - 00384336 _____ () C:\Windows\SysWOW64\17.cht
2015-01-11 21:22 - 2013-11-04 10:51 - 00095804 _____ () C:\Windows\SysWOW64\18.cht
2015-01-11 21:21 - 2013-11-04 10:51 - 00551272 _____ () C:\Windows\SysWOW64\15.cht
2015-01-11 21:21 - 2013-11-04 10:50 - 01246892 _____ () C:\Windows\SysWOW64\14.cht
2015-01-11 21:21 - 2013-11-04 10:50 - 00902860 _____ () C:\Windows\SysWOW64\9.cht
2015-01-11 21:21 - 2013-11-04 10:50 - 00516220 _____ () C:\Windows\SysWOW64\7.cht
2015-01-11 21:21 - 2013-11-04 10:50 - 00516220 _____ () C:\Windows\SysWOW64\11.cht
2015-01-11 21:21 - 2013-11-04 10:50 - 00115676 _____ () C:\Windows\SysWOW64\8.cht
2015-01-11 21:21 - 2013-11-04 10:50 - 00098488 _____ () C:\Windows\SysWOW64\10.cht
2015-01-11 21:21 - 2013-11-04 10:50 - 00095804 _____ () C:\Windows\SysWOW64\12.cht
2015-01-11 21:21 - 2013-11-04 10:50 - 00089420 _____ () C:\Windows\SysWOW64\13.cht
2015-01-11 14:13 - 2013-11-04 10:50 - 01760164 _____ () C:\Windows\SysWOW64\4.cht
2015-01-11 14:13 - 2013-11-04 10:50 - 01246892 _____ () C:\Windows\SysWOW64\5.cht
2015-01-11 14:13 - 2013-11-04 10:50 - 01186760 _____ () C:\Windows\SysWOW64\6.cht
2015-01-11 14:11 - 2013-11-04 10:50 - 00902860 _____ () C:\Windows\SysWOW64\3.cht
2015-01-11 14:10 - 2013-11-04 10:50 - 01246892 _____ () C:\Windows\SysWOW64\2.cht
2015-01-11 14:09 - 2013-11-04 10:50 - 00408064 _____ () C:\Windows\SysWOW64\1.cht
2015-01-09 14:16 - 2013-10-31 16:30 - 00000000 ____D () C:\Users\Phyllis\AppData\Roaming\Adobe
2015-01-09 10:04 - 2013-11-12 10:18 - 00000000 ____D () C:\ProgramData\WebEx
2015-01-09 09:41 - 2014-09-04 06:02 - 00000000 ____D () C:\Users\Phyllis\AppData\Local\WebEx
2015-01-09 09:04 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-01-05 17:47 - 2014-05-05 09:04 - 00000000 ____D () C:\Users\Phyllis\AppData\Roaming\Real
2015-01-05 16:04 - 2013-11-06 19:17 - 00369376 _____ () C:\Windows\SysWOW64\54.cht
2015-01-05 16:03 - 2013-11-06 19:15 - 00836488 _____ () C:\Windows\SysWOW64\53.cht
2015-01-05 16:02 - 2013-11-06 19:13 - 01741856 _____ () C:\Windows\SysWOW64\52.cht
2015-01-05 15:55 - 2013-11-06 19:12 - 00311132 _____ () C:\Windows\SysWOW64\51.cht
2015-01-05 15:55 - 2013-11-06 16:35 - 00416772 _____ () C:\Windows\SysWOW64\49.cht
2015-01-05 15:55 - 2013-11-06 16:35 - 00396108 _____ () C:\Windows\SysWOW64\50.cht
2015-01-05 15:54 - 2013-11-06 16:34 - 00434328 _____ () C:\Windows\SysWOW64\48.cht
2015-01-05 15:50 - 2013-11-06 16:34 - 00428512 _____ () C:\Windows\SysWOW64\47.cht
2015-01-05 15:46 - 2013-11-06 15:19 - 00357760 _____ () C:\Windows\SysWOW64\46.cht
2015-01-05 14:11 - 2013-11-08 14:53 - 00416772 _____ () C:\Windows\SysWOW64\93.cht
2015-01-05 14:03 - 2013-11-08 13:24 - 00311132 _____ () C:\Windows\SysWOW64\92.cht
2015-01-05 13:54 - 2013-11-08 13:24 - 00407388 _____ () C:\Windows\SysWOW64\91.cht
2015-01-05 13:43 - 2013-11-08 13:24 - 00132012 _____ () C:\Windows\SysWOW64\90.cht
2015-01-05 13:43 - 2013-11-08 13:23 - 01238004 _____ () C:\Windows\SysWOW64\89.cht
2015-01-05 13:42 - 2013-11-08 13:23 - 00416772 _____ () C:\Windows\SysWOW64\88.cht
2015-01-05 13:40 - 2013-11-08 13:23 - 00033944 _____ () C:\Windows\SysWOW64\87.cht
2015-01-05 13:36 - 2013-11-08 13:23 - 00416772 _____ () C:\Windows\SysWOW64\86.cht
2015-01-05 12:51 - 2013-11-08 13:23 - 01741856 _____ () C:\Windows\SysWOW64\85.cht
2015-01-05 12:50 - 2013-11-08 13:23 - 00416772 _____ () C:\Windows\SysWOW64\84.cht
2015-01-05 12:48 - 2013-11-08 13:00 - 01741856 _____ () C:\Windows\SysWOW64\83.cht
2015-01-05 12:41 - 2013-11-08 13:00 - 00416772 _____ () C:\Windows\SysWOW64\82.cht
2015-01-05 12:41 - 2013-11-08 11:58 - 01741856 _____ () C:\Windows\SysWOW64\81.cht
2015-01-05 12:37 - 2013-11-08 11:53 - 00416772 _____ () C:\Windows\SysWOW64\80.cht
2015-01-05 12:26 - 2013-11-08 11:53 - 00311132 _____ () C:\Windows\SysWOW64\79.cht
2015-01-05 12:25 - 2013-11-08 11:52 - 00033944 _____ () C:\Windows\SysWOW64\78.cht
2015-01-05 11:47 - 2013-11-08 11:52 - 00396108 _____ () C:\Windows\SysWOW64\77.cht
2015-01-05 11:45 - 2013-11-08 11:51 - 00416772 _____ () C:\Windows\SysWOW64\76.cht
2015-01-05 11:41 - 2013-11-08 11:51 - 00468128 _____ () C:\Windows\SysWOW64\75.cht
2015-01-05 10:49 - 2013-11-06 19:39 - 00468128 _____ () C:\Windows\SysWOW64\74.cht
2015-01-05 10:30 - 2013-11-06 19:38 - 00396108 _____ () C:\Windows\SysWOW64\73.cht
2015-01-05 10:07 - 2013-11-06 19:38 - 00416772 _____ () C:\Windows\SysWOW64\72.cht
2015-01-05 10:06 - 2013-11-06 19:38 - 00033944 _____ () C:\Windows\SysWOW64\71.cht
2015-01-05 09:57 - 2013-11-06 19:38 - 00580004 _____ () C:\Windows\SysWOW64\70.cht
2015-01-05 09:55 - 2013-11-06 19:33 - 01599764 _____ () C:\Windows\SysWOW64\69.cht
2015-01-05 09:53 - 2013-11-06 19:33 - 01596712 _____ () C:\Windows\SysWOW64\68.cht
2015-01-05 09:52 - 2013-11-06 19:32 - 01450788 _____ () C:\Windows\SysWOW64\66.cht
2015-01-05 09:52 - 2013-11-06 19:32 - 00409232 _____ () C:\Windows\SysWOW64\67.cht
2015-01-05 09:51 - 2013-11-06 19:32 - 00448028 _____ () C:\Windows\SysWOW64\64.cht
2015-01-05 09:51 - 2013-11-06 19:32 - 00196924 _____ () C:\Windows\SysWOW64\65.cht
2015-01-05 09:51 - 2013-11-06 19:31 - 00468128 _____ () C:\Windows\SysWOW64\63.cht
2015-01-05 09:51 - 2013-11-06 19:31 - 00126488 _____ () C:\Windows\SysWOW64\62.cht
2015-01-05 09:50 - 2013-11-06 19:31 - 01736816 _____ () C:\Windows\SysWOW64\61.cht
2015-01-05 09:48 - 2013-11-06 19:31 - 00416772 _____ () C:\Windows\SysWOW64\60.cht
2015-01-05 09:47 - 2013-11-06 19:30 - 00311132 _____ () C:\Windows\SysWOW64\59.cht
2015-01-05 09:47 - 2013-11-06 19:30 - 00145060 _____ () C:\Windows\SysWOW64\58.cht
2015-01-05 09:45 - 2013-11-06 19:20 - 00070176 _____ () C:\Windows\SysWOW64\57.cht
2015-01-05 09:41 - 2013-11-06 19:20 - 00031944 _____ () C:\Windows\SysWOW64\56.cht
2015-01-05 09:41 - 2013-11-06 19:17 - 01736816 _____ () C:\Windows\SysWOW64\55.cht
2015-01-02 11:44 - 2013-12-06 10:00 - 00465316 _____ () C:\Windows\SysWOW64\316.cht
2015-01-02 11:42 - 2013-12-06 10:00 - 00405544 _____ () C:\Windows\SysWOW64\315.cht
2015-01-02 11:41 - 2013-12-06 10:00 - 00724620 _____ () C:\Windows\SysWOW64\314.cht
2015-01-02 11:40 - 2013-12-06 10:00 - 01831780 _____ () C:\Windows\SysWOW64\313.cht
2015-01-02 11:39 - 2013-12-06 10:00 - 01223972 _____ () C:\Windows\SysWOW64\312.cht
2015-01-02 11:39 - 2013-12-06 10:00 - 00502344 _____ () C:\Windows\SysWOW64\310.cht
2015-01-02 11:39 - 2013-12-06 10:00 - 00402840 _____ () C:\Windows\SysWOW64\311.cht
2015-01-02 11:36 - 2013-12-06 10:00 - 00480912 _____ () C:\Windows\SysWOW64\309.cht
2015-01-02 11:36 - 2013-12-06 10:00 - 00448132 _____ () C:\Windows\SysWOW64\308.cht
2015-01-02 11:35 - 2013-12-06 10:00 - 00514860 _____ () C:\Windows\SysWOW64\307.cht
2015-01-02 11:31 - 2013-12-06 10:00 - 00446256 _____ () C:\Windows\SysWOW64\306.cht
2015-01-02 11:30 - 2013-12-06 09:59 - 00404220 _____ () C:\Windows\SysWOW64\304.cht
2015-01-02 11:30 - 2013-12-06 09:59 - 00372996 _____ () C:\Windows\SysWOW64\305.cht
2015-01-02 11:30 - 2013-12-06 09:59 - 00352192 _____ () C:\Windows\SysWOW64\303.cht
2015-01-02 11:29 - 2013-12-06 09:59 - 00779172 _____ () C:\Windows\SysWOW64\302.cht
2015-01-02 11:29 - 2013-12-06 09:59 - 00386004 _____ () C:\Windows\SysWOW64\301.cht
2015-01-02 11:28 - 2013-12-06 09:59 - 00145060 _____ () C:\Windows\SysWOW64\300.cht
2015-01-02 11:21 - 2013-12-06 09:58 - 00033944 _____ () C:\Windows\SysWOW64\299.cht
2015-01-02 11:21 - 2013-12-06 09:58 - 00033944 _____ () C:\Windows\SysWOW64\298.cht
2015-01-02 11:20 - 2013-12-06 09:58 - 00644924 _____ () C:\Windows\SysWOW64\295.cht
2015-01-02 11:20 - 2013-12-06 09:58 - 00644924 _____ () C:\Windows\SysWOW64\294.cht
2015-01-02 11:20 - 2013-12-06 09:58 - 00092164 _____ () C:\Windows\SysWOW64\297.cht
2015-01-02 11:20 - 2013-12-06 09:58 - 00092164 _____ () C:\Windows\SysWOW64\296.cht
2015-01-02 11:19 - 2013-12-06 09:58 - 00187760 _____ () C:\Windows\SysWOW64\293.cht
2015-01-02 11:19 - 2013-12-06 09:58 - 00187760 _____ () C:\Windows\SysWOW64\292.cht
2015-01-02 11:11 - 2013-12-06 09:58 - 00033944 _____ () C:\Windows\SysWOW64\291.cht
2015-01-02 11:11 - 2013-12-06 09:58 - 00033944 _____ () C:\Windows\SysWOW64\290.cht
2015-01-02 10:59 - 2013-12-06 09:58 - 00440788 _____ () C:\Windows\SysWOW64\289.cht
2015-01-02 10:59 - 2013-12-06 09:58 - 00440788 _____ () C:\Windows\SysWOW64\288.cht
2015-01-02 10:55 - 2013-12-06 09:58 - 00465316 _____ () C:\Windows\SysWOW64\287.cht
2015-01-02 10:55 - 2013-12-06 09:58 - 00465316 _____ () C:\Windows\SysWOW64\286.cht
2015-01-02 10:27 - 2013-12-06 09:58 - 00033944 _____ () C:\Windows\SysWOW64\285.cht
2015-01-02 10:27 - 2013-12-06 09:58 - 00033944 _____ () C:\Windows\SysWOW64\284.cht
2015-01-02 10:26 - 2013-12-06 09:58 - 00145060 _____ () C:\Windows\SysWOW64\279.cht
2015-01-02 10:26 - 2013-12-06 09:58 - 00145060 _____ () C:\Windows\SysWOW64\278.cht
2015-01-02 10:26 - 2013-12-06 09:58 - 00092164 _____ () C:\Windows\SysWOW64\281.cht
2015-01-02 10:26 - 2013-12-06 09:58 - 00092164 _____ () C:\Windows\SysWOW64\280.cht
2015-01-02 10:26 - 2013-12-06 09:58 - 00034140 _____ () C:\Windows\SysWOW64\283.cht
2015-01-02 10:26 - 2013-12-06 09:58 - 00034140 _____ () C:\Windows\SysWOW64\282.cht
2015-01-02 10:24 - 2013-12-06 09:58 - 00092164 _____ () C:\Windows\SysWOW64\277.cht
2015-01-02 10:24 - 2013-12-06 09:58 - 00092164 _____ () C:\Windows\SysWOW64\276.cht
2015-01-02 10:23 - 2013-12-06 09:58 - 00034140 _____ () C:\Windows\SysWOW64\275.cht
2015-01-02 10:23 - 2013-12-06 09:58 - 00034140 _____ () C:\Windows\SysWOW64\274.cht
2015-01-02 10:23 - 2013-12-06 09:57 - 00145060 _____ () C:\Windows\SysWOW64\273.cht
2015-01-02 10:23 - 2013-12-06 09:57 - 00145060 _____ () C:\Windows\SysWOW64\272.cht
2015-01-02 10:23 - 2013-12-06 09:57 - 00145060 _____ () C:\Windows\SysWOW64\269.cht
2015-01-02 10:23 - 2013-12-06 09:57 - 00145060 _____ () C:\Windows\SysWOW64\268.cht
2015-01-02 10:23 - 2013-12-06 09:57 - 00092164 _____ () C:\Windows\SysWOW64\271.cht
2015-01-02 10:23 - 2013-12-06 09:57 - 00092164 _____ () C:\Windows\SysWOW64\270.cht
2015-01-02 10:22 - 2013-12-06 09:57 - 00187760 _____ () C:\Windows\SysWOW64\267.cht
2015-01-02 10:22 - 2013-12-06 09:57 - 00187760 _____ () C:\Windows\SysWOW64\266.cht
2015-01-02 10:09 - 2013-12-06 09:57 - 00187760 _____ () C:\Windows\SysWOW64\263.cht
2015-01-02 10:09 - 2013-12-06 09:57 - 00187760 _____ () C:\Windows\SysWOW64\262.cht
2015-01-02 10:09 - 2013-12-06 09:57 - 00031944 _____ () C:\Windows\SysWOW64\265.cht
2015-01-02 10:09 - 2013-12-06 09:57 - 00031944 _____ () C:\Windows\SysWOW64\264.cht
2015-01-02 10:08 - 2013-12-06 09:57 - 00465316 _____ () C:\Windows\SysWOW64\261.cht
2015-01-02 10:08 - 2013-12-06 09:57 - 00465316 _____ () C:\Windows\SysWOW64\260.cht
2015-01-02 10:08 - 2013-12-06 09:57 - 00440788 _____ () C:\Windows\SysWOW64\259.cht
2015-01-02 10:08 - 2013-12-06 09:57 - 00440788 _____ () C:\Windows\SysWOW64\258.cht
2015-01-02 10:05 - 2013-12-06 09:57 - 00465316 _____ () C:\Windows\SysWOW64\257.cht
2015-01-02 10:05 - 2013-12-06 09:57 - 00465316 _____ () C:\Windows\SysWOW64\256.cht
2015-01-02 10:04 - 2013-12-06 09:57 - 00350876 _____ () C:\Windows\SysWOW64\253.cht
2015-01-02 10:04 - 2013-12-06 09:57 - 00350876 _____ () C:\Windows\SysWOW64\252.cht
2015-01-02 10:04 - 2013-12-06 09:57 - 00033944 _____ () C:\Windows\SysWOW64\255.cht
2015-01-02 10:04 - 2013-12-06 09:57 - 00033944 _____ () C:\Windows\SysWOW64\254.cht
2015-01-02 10:03 - 2013-12-06 09:56 - 00461848 _____ () C:\Windows\SysWOW64\247.cht
2015-01-02 10:03 - 2013-12-06 09:56 - 00461848 _____ () C:\Windows\SysWOW64\246.cht
2015-01-02 10:03 - 2013-12-06 09:56 - 00440788 _____ () C:\Windows\SysWOW64\251.cht
2015-01-02 10:03 - 2013-12-06 09:56 - 00440788 _____ () C:\Windows\SysWOW64\250.cht
2015-01-02 10:03 - 2013-12-06 09:56 - 00033944 _____ () C:\Windows\SysWOW64\249.cht
2015-01-02 10:03 - 2013-12-06 09:56 - 00033944 _____ () C:\Windows\SysWOW64\248.cht
2015-01-01 23:13 - 2013-12-06 09:56 - 00461848 _____ () C:\Windows\SysWOW64\245.cht
2015-01-01 21:04 - 2013-12-06 09:56 - 00187760 _____ () C:\Windows\SysWOW64\244.cht
2015-01-01 21:04 - 2013-12-06 09:56 - 00187760 _____ () C:\Windows\SysWOW64\243.cht
2015-01-01 21:03 - 2013-12-06 09:56 - 00470156 _____ () C:\Windows\SysWOW64\242.cht
2015-01-01 21:03 - 2013-12-06 09:56 - 00470156 _____ () C:\Windows\SysWOW64\241.cht
2015-01-01 12:23 - 2013-12-06 09:56 - 00597548 _____ () C:\Windows\SysWOW64\240.cht
2015-01-01 12:23 - 2013-12-06 09:56 - 00597548 _____ () C:\Windows\SysWOW64\239.cht
2015-01-01 11:56 - 2013-12-06 09:56 - 00475160 _____ () C:\Windows\SysWOW64\238.cht
2015-01-01 11:56 - 2013-12-06 09:56 - 00475160 _____ () C:\Windows\SysWOW64\237.cht
2015-01-01 11:51 - 2013-12-06 09:56 - 00459808 _____ () C:\Windows\SysWOW64\236.cht
2015-01-01 11:51 - 2013-12-06 09:56 - 00459808 _____ () C:\Windows\SysWOW64\235.cht
2015-01-01 11:46 - 2013-12-06 09:56 - 00425888 _____ () C:\Windows\SysWOW64\234.cht
2015-01-01 11:46 - 2013-12-06 09:56 - 00425888 _____ () C:\Windows\SysWOW64\233.cht
2015-01-01 11:44 - 2013-12-06 09:56 - 00033944 _____ () C:\Windows\SysWOW64\232.cht
2015-01-01 11:43 - 2013-12-06 09:56 - 00033944 _____ () C:\Windows\SysWOW64\231.cht
2015-01-01 01:01 - 2013-12-06 09:56 - 00033944 _____ () C:\Windows\SysWOW64\230.cht
2015-01-01 01:00 - 2013-11-24 01:05 - 00000000 ____D () C:\Program Files (x86)\TradeStation Archives
2014-12-31 23:12 - 2013-12-06 09:56 - 00033944 _____ () C:\Windows\SysWOW64\229.cht
2014-12-31 16:50 - 2013-12-06 09:56 - 00440788 _____ () C:\Windows\SysWOW64\228.cht
2014-12-31 16:50 - 2013-12-06 09:56 - 00440788 _____ () C:\Windows\SysWOW64\227.cht
2014-12-31 16:50 - 2013-12-06 09:56 - 00033944 _____ () C:\Windows\SysWOW64\226.cht
2014-12-31 16:50 - 2013-12-06 09:55 - 00033944 _____ () C:\Windows\SysWOW64\225.cht
2014-12-31 16:46 - 2013-12-06 09:55 - 01894996 _____ () C:\Windows\SysWOW64\223.cht
2014-12-31 16:46 - 2013-12-06 09:55 - 01869844 _____ () C:\Windows\SysWOW64\224.cht
2014-12-31 16:31 - 2013-12-06 09:55 - 00502960 _____ () C:\Windows\SysWOW64\222.cht
2014-12-31 16:31 - 2013-12-06 09:55 - 00502960 _____ () C:\Windows\SysWOW64\221.cht
2014-12-31 15:50 - 2013-12-06 09:55 - 00008628 _____ () C:\Windows\SysWOW64\220.cht
2014-12-31 15:50 - 2013-12-06 09:55 - 00008628 _____ () C:\Windows\SysWOW64\219.cht
2014-12-31 15:49 - 2013-12-06 09:55 - 00459068 _____ () C:\Windows\SysWOW64\218.cht
2014-12-31 15:49 - 2013-12-06 09:55 - 00459068 _____ () C:\Windows\SysWOW64\217.cht
2014-12-31 15:48 - 2013-12-06 09:55 - 00724792 _____ () C:\Windows\SysWOW64\216.cht
2014-12-31 15:48 - 2013-12-06 09:55 - 00724792 _____ () C:\Windows\SysWOW64\215.cht
2014-12-31 15:47 - 2013-12-06 09:55 - 00440788 _____ () C:\Windows\SysWOW64\214.cht
2014-12-31 15:47 - 2013-12-06 09:55 - 00440788 _____ () C:\Windows\SysWOW64\213.cht
2014-12-31 15:46 - 2013-12-06 09:55 - 00465316 _____ () C:\Windows\SysWOW64\208.cht
2014-12-31 15:46 - 2013-12-06 09:55 - 00465316 _____ () C:\Windows\SysWOW64\207.cht
2014-12-31 15:46 - 2013-12-06 09:55 - 00350876 _____ () C:\Windows\SysWOW64\212.cht
2014-12-31 15:46 - 2013-12-06 09:55 - 00350876 _____ () C:\Windows\SysWOW64\211.cht
2014-12-31 15:46 - 2013-12-06 09:55 - 00033944 _____ () C:\Windows\SysWOW64\210.cht
2014-12-31 15:46 - 2013-12-06 09:55 - 00033944 _____ () C:\Windows\SysWOW64\209.cht
2014-12-31 15:45 - 2013-12-06 09:55 - 01894996 _____ () C:\Windows\SysWOW64\205.cht
2014-12-31 15:45 - 2013-12-06 09:55 - 01868836 _____ () C:\Windows\SysWOW64\206.cht
2014-12-31 15:44 - 2013-12-06 09:55 - 00626396 _____ () C:\Windows\SysWOW64\202.cht
2014-12-31 15:44 - 2013-12-06 09:55 - 00626396 _____ () C:\Windows\SysWOW64\201.cht
2014-12-31 15:44 - 2013-12-06 09:55 - 00187760 _____ () C:\Windows\SysWOW64\204.cht
2014-12-31 15:44 - 2013-12-06 09:55 - 00187760 _____ () C:\Windows\SysWOW64\203.cht
2014-12-31 15:43 - 2013-12-06 09:55 - 00126488 _____ () C:\Windows\SysWOW64\200.cht
2014-12-31 15:43 - 2013-12-06 09:54 - 00126488 _____ () C:\Windows\SysWOW64\199.cht
2014-12-31 15:42 - 2013-12-06 09:54 - 00532784 _____ () C:\Windows\SysWOW64\198.cht
2014-12-31 15:42 - 2013-12-06 09:54 - 00532784 _____ () C:\Windows\SysWOW64\197.cht
2014-12-31 15:41 - 2013-12-06 09:54 - 00461848 _____ () C:\Windows\SysWOW64\196.cht
2014-12-31 15:41 - 2013-12-06 09:54 - 00461848 _____ () C:\Windows\SysWOW64\195.cht
2014-12-31 15:38 - 2013-12-06 09:54 - 00126488 _____ () C:\Windows\SysWOW64\194.cht
2014-12-31 15:38 - 2013-12-06 09:54 - 00126488 _____ () C:\Windows\SysWOW64\193.cht
2014-12-31 15:33 - 2013-12-06 09:54 - 00464292 _____ () C:\Windows\SysWOW64\192.cht
2014-12-31 15:33 - 2013-12-06 09:54 - 00464292 _____ () C:\Windows\SysWOW64\191.cht
2014-12-31 15:32 - 2013-12-06 09:54 - 00464116 _____ () C:\Windows\SysWOW64\190.cht
2014-12-31 15:32 - 2013-12-06 09:54 - 00464116 _____ () C:\Windows\SysWOW64\189.cht
2014-12-31 15:29 - 2013-12-06 09:54 - 00530648 _____ () C:\Windows\SysWOW64\188.cht
2014-12-31 15:29 - 2013-12-06 09:54 - 00530648 _____ () C:\Windows\SysWOW64\187.cht
2014-12-31 15:29 - 2013-12-06 09:54 - 00465316 _____ () C:\Windows\SysWOW64\186.cht
2014-12-31 15:28 - 2013-12-06 09:54 - 00465316 _____ () C:\Windows\SysWOW64\185.cht
2014-12-31 15:28 - 2013-12-06 09:54 - 00350876 _____ () C:\Windows\SysWOW64\184.cht
2014-12-31 15:28 - 2013-12-06 09:54 - 00350876 _____ () C:\Windows\SysWOW64\183.cht
2014-12-31 15:28 - 2013-12-06 09:54 - 00033944 _____ () C:\Windows\SysWOW64\182.cht
2014-12-31 15:28 - 2013-12-06 09:54 - 00033944 _____ () C:\Windows\SysWOW64\181.cht
2014-12-31 15:27 - 2013-12-06 09:54 - 00123508 _____ () C:\Windows\SysWOW64\180.cht
2014-12-31 15:27 - 2013-12-06 09:54 - 00123508 _____ () C:\Windows\SysWOW64\179.cht
2014-12-31 15:22 - 2013-12-06 09:54 - 00641180 _____ () C:\Windows\SysWOW64\178.cht
2014-12-31 15:22 - 2013-12-06 09:54 - 00641180 _____ () C:\Windows\SysWOW64\177.cht
2014-12-31 15:21 - 2013-12-06 09:54 - 00123508 _____ () C:\Windows\SysWOW64\176.cht
2014-12-31 15:21 - 2013-12-06 09:53 - 00123508 _____ () C:\Windows\SysWOW64\175.cht
2014-12-31 15:21 - 2013-12-02 13:36 - 00063244 _____ () C:\Windows\SysWOW64\174.cht
2014-12-31 15:21 - 2013-12-02 13:36 - 00063244 _____ () C:\Windows\SysWOW64\173.cht
2014-12-31 15:15 - 2013-12-02 13:35 - 00042212 _____ () C:\Windows\SysWOW64\172.cht
2014-12-31 15:15 - 2013-11-15 20:17 - 00042212 _____ () C:\Windows\SysWOW64\171.cht
2014-12-31 15:14 - 2013-11-15 20:17 - 00120048 _____ () C:\Windows\SysWOW64\170.cht
2014-12-31 15:14 - 2013-11-15 20:09 - 00120048 _____ () C:\Windows\SysWOW64\169.cht
2014-12-31 15:09 - 2013-11-15 20:09 - 00038084 _____ () C:\Windows\SysWOW64\168.cht
2014-12-31 15:09 - 2013-11-15 20:00 - 00038084 _____ () C:\Windows\SysWOW64\167.cht
2014-12-31 15:00 - 2013-11-15 20:00 - 00038092 _____ () C:\Windows\SysWOW64\166.cht
2014-12-31 15:00 - 2013-11-15 19:59 - 00038092 _____ () C:\Windows\SysWOW64\165.cht
2014-12-31 14:54 - 2013-11-15 19:59 - 00165716 _____ () C:\Windows\SysWOW64\164.cht
2014-12-31 14:54 - 2013-11-15 19:46 - 00165716 _____ () C:\Windows\SysWOW64\163.cht
2014-12-31 14:49 - 2013-11-15 16:37 - 00196924 _____ () C:\Windows\SysWOW64\162.cht
2014-12-31 14:49 - 2013-11-15 16:37 - 00196924 _____ () C:\Windows\SysWOW64\161.cht
2014-12-31 14:48 - 2013-11-15 16:35 - 00038076 _____ () C:\Windows\SysWOW64\160.cht
2014-12-31 14:48 - 2013-11-15 16:35 - 00038076 _____ () C:\Windows\SysWOW64\159.cht
2014-12-31 14:47 - 2013-11-15 16:22 - 00490616 _____ () C:\Windows\SysWOW64\158.cht
2014-12-31 14:47 - 2013-11-15 16:22 - 00490616 _____ () C:\Windows\SysWOW64\157.cht
2014-12-31 14:45 - 2013-11-15 16:22 - 00008628 _____ () C:\Windows\SysWOW64\156.cht
2014-12-31 14:45 - 2013-11-15 16:22 - 00008628 _____ () C:\Windows\SysWOW64\155.cht
2014-12-31 14:44 - 2013-11-15 16:22 - 00042184 _____ () C:\Windows\SysWOW64\154.cht
2014-12-31 14:44 - 2013-11-15 16:21 - 00042184 _____ () C:\Windows\SysWOW64\153.cht
2014-12-31 14:39 - 2013-11-15 16:21 - 00770836 _____ () C:\Windows\SysWOW64\152.cht
2014-12-31 14:39 - 2013-11-15 16:20 - 00796300 _____ () C:\Windows\SysWOW64\151.cht
2014-12-31 14:39 - 2013-11-15 16:20 - 00440788 _____ () C:\Windows\SysWOW64\150.cht
2014-12-31 14:39 - 2013-11-15 16:20 - 00440788 _____ () C:\Windows\SysWOW64\149.cht
2014-12-31 14:38 - 2013-11-15 16:19 - 00033944 _____ () C:\Windows\SysWOW64\148.cht
2014-12-31 14:38 - 2013-11-15 16:10 - 00033944 _____ () C:\Windows\SysWOW64\147.cht
2014-12-31 14:36 - 2013-11-15 16:10 - 00350876 _____ () C:\Windows\SysWOW64\146.cht
2014-12-31 14:36 - 2013-11-15 16:08 - 00350876 _____ () C:\Windows\SysWOW64\145.cht
2014-12-31 14:35 - 2013-11-15 15:17 - 00033944 _____ () C:\Windows\SysWOW64\144.cht
2014-12-31 14:35 - 2013-11-15 15:17 - 00033944 _____ () C:\Windows\SysWOW64\143.cht
2014-12-31 14:32 - 2013-11-15 15:17 - 00440788 _____ () C:\Windows\SysWOW64\142.cht
2014-12-31 14:32 - 2013-11-15 13:34 - 00440788 _____ () C:\Windows\SysWOW64\141.cht
2014-12-31 14:18 - 2014-02-10 19:59 - 00000000 ____D () C:\Users\Phyllis\AppData\Roaming\Skype
2014-12-31 14:17 - 2013-11-15 13:34 - 00033944 _____ () C:\Windows\SysWOW64\140.cht
2014-12-31 14:17 - 2013-11-15 13:34 - 00033944 _____ () C:\Windows\SysWOW64\139.cht
2014-12-31 14:17 - 2013-11-15 13:25 - 00475160 _____ () C:\Windows\SysWOW64\138.cht
2014-12-31 14:17 - 2013-11-15 13:25 - 00475160 _____ () C:\Windows\SysWOW64\137.cht
2014-12-31 14:13 - 2013-11-15 13:25 - 00465316 _____ () C:\Windows\SysWOW64\136.cht
2014-12-31 14:13 - 2013-11-15 13:19 - 00465316 _____ () C:\Windows\SysWOW64\135.cht
2014-12-31 14:06 - 2013-11-15 13:10 - 00350876 _____ () C:\Windows\SysWOW64\134.cht
2014-12-31 14:06 - 2013-11-15 13:10 - 00350876 _____ () C:\Windows\SysWOW64\133.cht
2014-12-31 14:06 - 2013-11-15 13:10 - 00033944 _____ () C:\Windows\SysWOW64\132.cht
2014-12-31 14:06 - 2013-11-15 12:45 - 00033944 _____ () C:\Windows\SysWOW64\131.cht
2014-12-31 14:04 - 2013-11-15 12:45 - 00796300 _____ () C:\Windows\SysWOW64\129.cht
2014-12-31 14:04 - 2013-11-15 12:45 - 00768796 _____ () C:\Windows\SysWOW64\130.cht
2014-12-31 13:33 - 2013-11-15 12:40 - 00440788 _____ () C:\Windows\SysWOW64\128.cht
2014-12-31 13:33 - 2013-11-15 12:40 - 00440788 _____ () C:\Windows\SysWOW64\127.cht
2014-12-31 13:10 - 2013-11-15 12:40 - 00465316 _____ () C:\Windows\SysWOW64\126.cht
2014-12-31 13:10 - 2013-11-15 12:32 - 00465316 _____ () C:\Windows\SysWOW64\125.cht
2014-12-31 13:09 - 2013-11-15 12:32 - 00350876 _____ () C:\Windows\SysWOW64\124.cht
2014-12-31 13:09 - 2013-11-15 12:32 - 00350876 _____ () C:\Windows\SysWOW64\123.cht
2014-12-31 13:00 - 2013-11-15 12:32 - 00350876 _____ () C:\Windows\SysWOW64\122.cht
2014-12-31 13:00 - 2013-11-15 12:32 - 00350876 _____ () C:\Windows\SysWOW64\121.cht
2014-12-31 12:59 - 2013-11-15 12:32 - 00641180 _____ () C:\Windows\SysWOW64\120.cht
2014-12-31 12:59 - 2013-11-15 12:15 - 00641180 _____ () C:\Windows\SysWOW64\119.cht
2014-12-31 12:56 - 2013-11-15 12:15 - 00641180 _____ () C:\Windows\SysWOW64\118.cht
2014-12-31 12:56 - 2013-11-15 12:15 - 00641180 _____ () C:\Windows\SysWOW64\117.cht
2014-12-31 12:48 - 2013-11-15 12:12 - 00465316 _____ () C:\Windows\SysWOW64\116.cht
2014-12-31 12:48 - 2013-11-15 12:12 - 00465316 _____ () C:\Windows\SysWOW64\115.cht
2014-12-31 12:46 - 2013-11-15 12:12 - 00033944 _____ () C:\Windows\SysWOW64\114.cht
2014-12-31 12:46 - 2013-11-15 12:12 - 00033944 _____ () C:\Windows\SysWOW64\113.cht
2014-12-31 12:46 - 2013-11-15 11:49 - 00440788 _____ () C:\Windows\SysWOW64\112.cht
2014-12-31 12:46 - 2013-11-15 11:49 - 00440788 _____ () C:\Windows\SysWOW64\111.cht
2014-12-31 12:45 - 2013-11-15 11:49 - 00470156 _____ () C:\Windows\SysWOW64\110.cht
2014-12-31 12:45 - 2013-11-15 11:47 - 00470156 _____ () C:\Windows\SysWOW64\109.cht
2014-12-31 12:36 - 2013-11-15 11:47 - 00386004 _____ () C:\Windows\SysWOW64\108.cht
2014-12-31 12:36 - 2013-11-15 11:47 - 00386004 _____ () C:\Windows\SysWOW64\107.cht
2014-12-31 12:31 - 2013-11-15 11:47 - 00386004 _____ () C:\Windows\SysWOW64\106.cht
2014-12-31 12:30 - 2013-11-15 11:47 - 01894996 _____ () C:\Windows\SysWOW64\104.cht
2014-12-31 12:30 - 2013-11-15 11:47 - 01865812 _____ () C:\Windows\SysWOW64\105.cht
2014-12-31 12:29 - 2013-11-15 11:44 - 00465316 _____ () C:\Windows\SysWOW64\103.cht
2014-12-31 12:29 - 2013-11-15 11:44 - 00465316 _____ () C:\Windows\SysWOW64\102.cht
2014-12-31 12:25 - 2013-11-08 16:49 - 00440788 _____ () C:\Windows\SysWOW64\101.cht
2014-12-31 12:25 - 2013-11-08 15:46 - 00440788 _____ () C:\Windows\SysWOW64\100.cht
2014-12-31 12:23 - 2013-11-08 15:46 - 01865812 _____ () C:\Windows\SysWOW64\99.cht
2014-12-31 12:23 - 2013-11-08 15:45 - 01894996 _____ () C:\Windows\SysWOW64\98.cht
2014-12-31 12:23 - 2013-11-08 15:45 - 01296308 _____ () C:\Windows\SysWOW64\97.cht
2014-12-31 12:23 - 2013-11-08 15:45 - 01296308 _____ () C:\Windows\SysWOW64\96.cht
2014-12-31 12:22 - 2013-11-08 15:45 - 00480912 _____ () C:\Windows\SysWOW64\95.cht
2014-12-31 12:22 - 2013-11-08 15:45 - 00480912 _____ () C:\Windows\SysWOW64\94.cht
2014-12-31 06:14 - 2010-11-20 22:27 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

==================== Files in the root of some directories =======

2013-11-11 12:37 - 2013-11-29 12:49 - 0005116 _____ () C:\Users\Phyllis\AppData\Roaming\AutoTagLog.log
2013-11-11 12:06 - 2014-05-05 13:39 - 0009510 _____ () C:\Users\Phyllis\AppData\Roaming\RegistrationLog.log
2014-05-05 11:17 - 2014-05-05 13:38 - 0001132 _____ () C:\Users\Phyllis\AppData\Roaming\ReplayConverterLog.log
2013-11-11 12:06 - 2013-11-30 00:15 - 0051684 _____ () C:\Users\Phyllis\AppData\Roaming\ReplayMusicLog.log
2013-11-01 15:47 - 2013-11-01 15:47 - 0000320 _____ () C:\Users\Phyllis\AppData\Roaming\SEC517874.trad
2013-11-01 15:29 - 2013-11-01 15:29 - 0000320 _____ () C:\Users\Phyllis\AppData\Roaming\SEC540721.trad
2013-11-11 13:44 - 2013-11-11 13:45 - 0000874 _____ () C:\Users\Phyllis\AppData\Roaming\VideoPadlockLog.log
2014-12-26 20:12 - 2014-12-27 07:12 - 0000063 _____ () C:\Users\Phyllis\AppData\Roaming\WB.CFG
2013-10-30 19:32 - 2014-10-17 08:20 - 0007605 _____ () C:\Users\Phyllis\AppData\Local\resmon.resmoncfg
2013-11-11 13:24 - 2014-12-13 09:33 - 0293012 _____ () C:\Users\Phyllis\AppData\Local\rx_audio.Cache
2013-11-11 13:24 - 2014-11-30 13:15 - 0008424 _____ () C:\Users\Phyllis\AppData\Local\rx_image32.Cache
2013-10-30 17:53 - 2013-10-30 17:53 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\Phyllis\AppData\Local\Temp\6_Offer_16.exe
C:\Users\Phyllis\AppData\Local\Temp\917b0b87-3358-4e79-93de-3dfc2fc99ed0.exe
C:\Users\Phyllis\AppData\Local\Temp\clean20.dll
C:\Users\Phyllis\AppData\Local\Temp\CopyUpdate.exe
C:\Users\Phyllis\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpficmmn.dll
C:\Users\Phyllis\AppData\Local\Temp\GACInstaller.dll
C:\Users\Phyllis\AppData\Local\Temp\instutil.dll
C:\Users\Phyllis\AppData\Local\Temp\jna3188981325091469049.dll
C:\Users\Phyllis\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Phyllis\AppData\Local\Temp\lowproc.exe
C:\Users\Phyllis\AppData\Local\Temp\nitro_reader3_x64.exe
C:\Users\Phyllis\AppData\Local\Temp\Quarantine.exe
C:\Users\Phyllis\AppData\Local\Temp\RegistASM.exe
C:\Users\Phyllis\AppData\Local\Temp\Rev1427.tmp.exe
C:\Users\Phyllis\AppData\Local\Temp\Samsung_Magician_Setup_v44.exe
C:\Users\Phyllis\AppData\Local\Temp\Samsung_Magician_Setup_v45.exe
C:\Users\Phyllis\AppData\Local\Temp\sqlite3.dll
C:\Users\Phyllis\AppData\Local\Temp\stubhelper.dll
C:\Users\Phyllis\AppData\Local\Temp\TSInst10.exe
C:\Users\Phyllis\AppData\Local\Temp\TSInstallCAUtils.dll
C:\Users\Phyllis\AppData\Local\Temp\_ir_sf_temp_0DirectorSetup.exe
C:\Users\Phyllis\AppData\Local\Temp\_isFF18.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-24 00:44

==================== End Of Log ============================

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 1/30/2015
Scan Time: 11:35:41 AM
Logfile:
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.01.30.06
Rootkit Database: v2015.01.14.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Enabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Phyllis

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 403069
Time Elapsed: 6 min, 16 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)


Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-01-2015
Ran by Phyllis at 2015-01-30 16:23:59 Run:1
Running from C:\Users\Phyllis\Desktop\1-30-15
Loaded Profiles: Phyllis (Available profiles: Phyllis)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
AutoConfigURL: [S-1-5-21-4249353033-2772040276-2529461727-1000] => C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\BAC_PAC.js
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service
FF Extension: Search App by Ask - C:\Users\Phyllis\AppData\Roaming\Mozilla\Firefox\Profiles\3hyawouq.default-1384237558205\Extensions\toolbar_REAL1-SP@apn.ask.com.xpi [2014-11-24]
C:\Users\Phyllis\AppData\Roaming\Mozilla\Firefox\Profiles\3hyawouq.default-1384237558205\Extensions\toolbar_REAL1-SP@apn.ask.com.xpi
CHR Extension: (ShopAtHome.com) - C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlmebkoiahbppacaicbgncnjhbpdfkcc [2014-11-02]
C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlmebkoiahbppacaicbgncnjhbpdfkcc
S2 SessionLauncher; C:\Users\Phyllis\AppData\Local\Temp\DX9\SessionLauncher.exe [X]
S4 LMIRfsClientNP; No ImagePath
C:\Users\Phyllis\AppData\Local\Temp\6_Offer_16.exe
C:\Users\Phyllis\AppData\Local\Temp\917b0b87-3358-4e79-93de-3dfc2fc99ed0.exe
C:\Users\Phyllis\AppData\Local\Temp\clean20.dll
C:\Users\Phyllis\AppData\Local\Temp\CopyUpdate.exe
C:\Users\Phyllis\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpficmmn.dll
C:\Users\Phyllis\AppData\Local\Temp\GACInstaller.dll
C:\Users\Phyllis\AppData\Local\Temp\instutil.dll
C:\Users\Phyllis\AppData\Local\Temp\jna3188981325091469049.dll
C:\Users\Phyllis\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Phyllis\AppData\Local\Temp\lowproc.exe
C:\Users\Phyllis\AppData\Local\Temp\nitro_reader3_x64.exe
C:\Users\Phyllis\AppData\Local\Temp\Quarantine.exe
C:\Users\Phyllis\AppData\Local\Temp\RegistASM.exe
C:\Users\Phyllis\AppData\Local\Temp\Rev1427.tmp.exe
C:\Users\Phyllis\AppData\Local\Temp\Samsung_Magician_Setup_v44.exe
C:\Users\Phyllis\AppData\Local\Temp\Samsung_Magician_Setup_v45.exe
C:\Users\Phyllis\AppData\Local\Temp\sqlite3.dll
C:\Users\Phyllis\AppData\Local\Temp\stubhelper.dll
C:\Users\Phyllis\AppData\Local\Temp\TSInst10.exe
C:\Users\Phyllis\AppData\Local\Temp\TSInstallCAUtils.dll
C:\Users\Phyllis\AppData\Local\Temp\_ir_sf_temp_0DirectorSetup.exe
C:\Users\Phyllis\AppData\Local\Temp\_isFF18.exe
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\Users\Phyllis\Desktop\SMM_Call_10.02.mp3:Roxio EMC Stream
AlternateDataStreams: C:\Users\Phyllis\Downloads\attachedMessage (1).eml:OECustomProperty
AlternateDataStreams: C:\Users\Phyllis\Downloads\attachedMessage (2).eml:OECustomProperty
AlternateDataStreams: C:\Users\Phyllis\Downloads\attachedMessage (3).eml:OECustomProperty
AlternateDataStreams: C:\Users\Phyllis\Downloads\attachedMessage (4).eml:OECustomProperty
AlternateDataStreams: C:\Users\Phyllis\Downloads\attachedMessage (5).eml:OECustomProperty
AlternateDataStreams: C:\Users\Phyllis\Downloads\attachedMessage (6).eml:OECustomProperty
AlternateDataStreams: C:\Users\Phyllis\Downloads\attachedMessage (7).eml:OECustomProperty
AlternateDataStreams: C:\Users\Phyllis\Downloads\attachedMessage (8).eml:OECustomProperty
AlternateDataStreams: C:\Users\Phyllis\Downloads\attachedMessage (9).eml:OECustomProperty
AlternateDataStreams: C:\Users\Phyllis\Downloads\attachedMessage.eml:OECustomProperty
AlternateDataStreams: C:\Users\Phyllis\Downloads\Re_ 110 Newton Road_ P&S (1).eml:OECustomProperty
AlternateDataStreams: C:\Users\Phyllis\Downloads\Re_ 110 Newton Road_ P&S (2).eml:OECustomProperty
AlternateDataStreams: C:\Users\Phyllis\Downloads\Re_ 110 Newton Road_ P&S (3).eml:OECustomProperty
AlternateDataStreams: C:\Users\Phyllis\Downloads\Re_ 110 Newton Road_ P&S.eml:OECustomProperty
C:\Windows\System32\drivers\xvrmtal.sys
Emptytemp:
end



*****************

HKU\S-1-5-21-4249353033-2772040276-2529461727-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\AutoConfigURL => value deleted successfully.

"C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service" directory move:

C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\bacconfig.xml => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\BACUpgrade.txt => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\BAC_PAC.js => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Belcaro.BrowserAppCore.ActionEngine.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Belcaro.BrowserAppCore.BrowserMessaging.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Belcaro.BrowserAppCore.Common.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Belcaro.BrowserAppCore.CommunicationEngine.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Belcaro.BrowserAppCore.DefaultSearchProvider.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Belcaro.BrowserAppCore.HeartBeat.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Belcaro.BrowserAppCore.Logging.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Belcaro.BrowserAppCore.Models.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Belcaro.BrowserAppCore.RulesEngine.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Belcaro.BrowserAppCore.Suppression.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Belcaro.BrowserAppCore.UserInfo.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Belcaro.BrowserAppCore.Utils.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Belcaro.BrowserAppCore.WebSocketServer.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Belcaro.BrowserAppCore.XMLDataProvider.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Belcaro.BrowserAppCore.XmlEngine.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\delete_notification.html => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\FiddlerCore.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\HtmlAgilityPack.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\Ionic.Zip.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\merchants.xml => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\NotificationDialog.exe => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\NotificationDialog.exe.config => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\prefs.xml => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\SahCoreNet.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\SahProcessManager.exe => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\SahProcessManager.exe.config => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\ShopAtHome_BAC_Service.exe => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\ShopAtHome_BAC_Service.exe.config => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\SQLite.Designer.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\System.Data.SQLite.dll => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\uninstaller.exe => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\userinfo.xml => Moved successfully.
C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\version.txt => Moved successfully.
Could not move "C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service" directory. => Scheduled to move on reboot.

C:\Users\Phyllis\AppData\Roaming\Mozilla\Firefox\Profiles\3hyawouq.default-1384237558205\Extensions\toolbar_REAL1-SP@apn.ask.com.xpi => Moved successfully.
"C:\Users\Phyllis\AppData\Roaming\Mozilla\Firefox\Profiles\3hyawouq.default-1384237558205\Extensions\toolbar_REAL1-SP@apn.ask.com.xpi" => File/Directory not found.
C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlmebkoiahbppacaicbgncnjhbpdfkcc => Moved successfully.
"C:\Users\Phyllis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlmebkoiahbppacaicbgncnjhbpdfkcc" => File/Directory not found.
SessionLauncher => Service deleted successfully.
LMIRfsClientNP => Service deleted successfully.
C:\Users\Phyllis\AppData\Local\Temp\6_Offer_16.exe => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\917b0b87-3358-4e79-93de-3dfc2fc99ed0.exe => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\clean20.dll => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\CopyUpdate.exe => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpficmmn.dll => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\GACInstaller.dll => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\instutil.dll => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\jna3188981325091469049.dll => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\lowproc.exe => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\nitro_reader3_x64.exe => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\RegistASM.exe => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\Rev1427.tmp.exe => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\Samsung_Magician_Setup_v44.exe => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\Samsung_Magician_Setup_v45.exe => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\sqlite3.dll => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\stubhelper.dll => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\TSInst10.exe => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\TSInstallCAUtils.dll => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\_ir_sf_temp_0DirectorSetup.exe => Moved successfully.
C:\Users\Phyllis\AppData\Local\Temp\_isFF18.exe => Moved successfully.
C:\ProgramData\TEMP => ":373E1720" ADS removed successfully.
C:\Users\Phyllis\Desktop\SMM_Call_10.02.mp3 => ":Roxio EMC Stream" ADS removed successfully.
C:\Users\Phyllis\Downloads\attachedMessage (1).eml => ":OECustomProperty" ADS removed successfully.
C:\Users\Phyllis\Downloads\attachedMessage (2).eml => ":OECustomProperty" ADS removed successfully.
C:\Users\Phyllis\Downloads\attachedMessage (3).eml => ":OECustomProperty" ADS removed successfully.
C:\Users\Phyllis\Downloads\attachedMessage (4).eml => ":OECustomProperty" ADS removed successfully.
C:\Users\Phyllis\Downloads\attachedMessage (5).eml => ":OECustomProperty" ADS removed successfully.
C:\Users\Phyllis\Downloads\attachedMessage (6).eml => ":OECustomProperty" ADS removed successfully.
C:\Users\Phyllis\Downloads\attachedMessage (7).eml => ":OECustomProperty" ADS removed successfully.
C:\Users\Phyllis\Downloads\attachedMessage (8).eml => ":OECustomProperty" ADS removed successfully.
C:\Users\Phyllis\Downloads\attachedMessage (9).eml => ":OECustomProperty" ADS removed successfully.
C:\Users\Phyllis\Downloads\attachedMessage.eml => ":OECustomProperty" ADS removed successfully.
C:\Users\Phyllis\Downloads\Re_ 110 Newton Road_ P&S (1).eml => ":OECustomProperty" ADS removed successfully.
C:\Users\Phyllis\Downloads\Re_ 110 Newton Road_ P&S (2).eml => ":OECustomProperty" ADS removed successfully.
C:\Users\Phyllis\Downloads\Re_ 110 Newton Road_ P&S (3).eml => ":OECustomProperty" ADS removed successfully.
C:\Users\Phyllis\Downloads\Re_ 110 Newton Road_ P&S.eml => ":OECustomProperty" ADS removed successfully.
"C:\Windows\System32\drivers\xvrmtal.sys" => File/Directory not found.
EmptyTemp: => Removed 17.2 GB temporary data.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-01-30 16:27:06)<=

C:\Users\Phyllis\AppData\Roaming\ShopAtHome.com BrowserAppCore Service => Is moved successfully.

==== End of Fixlog 16:27:06 ====

C:\AdwCleaner\Quarantine\C\Program Files (x86)\AskPartnerNetwork\Toolbar\APNSetup.exe.vir   a variant of Win32/Bundled.Toolbar.Ask.E potentially unsafe application   deleted - quarantined
C:\Users\Phyllis\Downloads\cbsidlm-cbsi188-Moyea_FLV_Player-ORG-10677393.exe   a variant of Win32/CNETInstaller.B potentially unwanted application   deleted - quarantined
C:\Users\Phyllis\Downloads\MPlayer.exe   a variant of Win32/InstallCore.TR potentially unwanted application   deleted - quarantined
---------------------------------
 Results of screen317's Security Check version 0.99.95 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````[/u]
 Windows Firewall Enabled! 
Microsoft Security Essentials   
 Antivirus up to date! 
`````````Anti-malware/Other Utilities Check:`````````[/u]
 Java 7 Update 71 
  Java 64-bit 8 Update 31[/color] 
 Adobe Flash Player 16.0.0.296 
 Adobe Reader XI 
 Mozilla Firefox (35.0.1)
 Google Chrome (40.0.2214.91)
 Google Chrome (40.0.2214.93)
 Google Chrome (plugins...)
````````Process Check: objlist.exe by Laurent````````[/u] 
 Microsoft Security Essentials MSMpEng.exe
 Microsoft Security Essentials msseces.exe
 Malwarebytes Anti-Malware mbamservice.exe 
 Malwarebytes Anti-Malware mbam.exe 
 Malwarebytes Anti-Malware mbamscheduler.exe   
`````````````````System Health check`````````````````[/u]
 Total Fragmentation on Drive C: 31% Defragment your hard drive soon! (Do NOT defrag if SSD!)
````````````````````End of Log``````````````````````[/u]



Yes, this an SSD, so not to defrag.

I have no other concerns; system seems to be working well.

The hyperlinks in my Microsoft Outlook would not open.  I fixed it with Microsoft Fix it 50388 from Microsoft Support http://support.microsoft.com/kb/310049?fi=50388  from a  Google search, and it seems to be working fine now.  So it seems everything i working fine!