Tried to copy and paste the FRST.txt file, an error occurred saying I had 59,749 characters and needed to shorten it to 50,000 and the Addition.txt--I'm sorry but I don't know how to attach to the reply. Do you want the FRST.txt file split up between 2 posts? If you tell me how to attach a file to a post I can do that...
Exactly.Quote:
Do you want the FRST.txt file split up between 2 posts?
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 09-06-2013
Ran by Janette (administrator) on 09-06-2013 22:38:06
Running from C:\Users\Janette\Downloads
Windows Vista (TM) Home Premium Service Pack 2 (X86) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Safe Mode (with Networking)
==================== Processes (Whitelisted) ===================
(Lenovo Group Limited) C:\PROGRA~1\ThinkPad\UTILIT~1\PWMUIAux.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe
(McAfee, Inc.) C:\Program Files\McAfee\MAT\McPvTray.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [TVT Scheduler Proxy] C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe [487424 2008-03-04] (Lenovo Group Limited)
HKLM\...\Run: [TpShocks] TpShocks.exe [x]
HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [1725736 2010-04-23] (Synaptics Incorporated)
HKLM\...\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe [1282048 2007-07-09] (Analog Devices, Inc.)
HKLM\...\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey [x]
HKLM\...\Run: [LPManager] C:\PROGRA~1\Lenovo\LENOVO~1\LPMGR.exe [124256 2007-07-13] (Lenovo Group Limited)
HKLM\...\Run: [IaNvSrv] C:\Program Files\Intel\Intel Matrix Storage Manager\OROM\IaNvSrv\IaNvSrv.exe [33304 2007-10-23] (Intel Corporation)
HKLM\...\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM\...\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe [256576 2009-12-01] (Lenovo Group Ltd.)
HKLM\...\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe [102400 2006-10-12] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe" [217176 2006-11-15] (Diskeeper Corporation)
HKLM\...\Run: [cssauth] "C:\Program Files\Lenovo\Client Security Solution\cssauth.exe" silent [2630968 2007-08-09] (Lenovo Group Limited)
HKLM\...\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [ACWLIcon] C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe [124200 2007-07-05] (Lenovo)
HKLM\...\Run: [ACTray] C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe [419112 2007-07-05] (Lenovo)
HKLM\...\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe" [57344 2005-09-16] (Adobe Systems Incorporated)
HKLM\...\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)
HKLM\...\Runonce: [] [x]
HKLM\...\Runonce: [GrpConv] grpconv -o [x]
HKCU\...\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe [125952 2008-01-19] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-19] (Microsoft Corporation)
Startup: C:\ProgramData\Start Menu\Programs\Startup\Digital Line Detect.lnk
ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files\Digital Line Detect\DLG.exe (Avanquest Software )
Startup: C:\ProgramData\Start Menu\Programs\Startup\ExifLauncher2.lnk
ShortcutTarget: ExifLauncher2.lnk -> C:\Program Files\FinePixViewer\QuickDCF2.exe (FUJIFILM Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir...ie&ar=iesearch
HKLM SearchScopes: DefaultScope {56256A51-B582-467e-B8D4-7786EDA79AE0} URL =
SearchScopes: HKLM - {8EA3020D-938C-4106-9E80-31B3115264CE} URL = http://search.live.com/results.aspx?q={searchTerms}&entrypoint={referrer:source?}&FORM=LENIE
HKCU SearchScopes: DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={C96D4DF8-59CE-4206-B7C5-D03F29772532}&mid=28de95e7bab447d0bac8d157716ebc84-3d0a17156c5f9c0cb85bd1076241fe91f64e4dc1&lang=en&ds=ft011&pr=sa&d=2012-07-12 09:52:45&v=11.1.0.12&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {45DA25B3-EC74-4933-8E1F-4FF592449C30} URL = http://search.yahoo.com/search?fr=mcafee&p={SearchTerms}
SearchScopes: HKCU - {8EA3020D-938C-4106-9E80-31B3115264CE} URL = http://search.live.com/results.aspx?q={searchTerms}&entrypoint={referrer:source?}&FORM=LENIE
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={C96D4DF8-59CE-4206-B7C5-D03F29772532}&mid=28de95e7bab447d0bac8d157716ebc84-3d0a17156c5f9c0cb85bd1076241fe91f64e4dc1&lang=en&ds=ft011&pr=sa&d=2012-07-12 09:52:45&v=11.1.0.12&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL = http://search.yahoo.com/search?fr=mcafee&p={searchTerms}
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: CPwmIEBrowserHelper Object - {F040E541-A427-4CF7-85D8-75E3E0F476C5} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [147456] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Janette\AppData\Roaming\Mozilla\Firefox\Profiles\61h3obro.default-1370213703050
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin: @java.com/DTPlugin,version=10.5.1 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/RhapsodyPlayerEngine,version=1.0 - C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\27.0.1453.94\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Windows Genuine Advantage) - C:\Program Files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll (Microsoft Corporation)
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101752.dll (Amazon.com, Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U33) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files\McAfee\SiteAdvisor\npmcffplg32.dll No File
CHR Plugin: (RealNetworks Rhapsody Player Engine) - C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (McAfee SecurityCenter) - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (Docs) - C:\Users\Janette\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\Janette\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\Janette\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Janette\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (SiteAdvisor) - C:\Users\Janette\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.61.113.2_0
CHR Extension: (Gmail) - C:\Users\Janette\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
========================== Services (Whitelisted) =================
S2 0164701370839192mcinstcleanup; C:\Users\Janette\AppData\Local\Temp\016470~1.EXE [833616 2013-01-30] (McAfee, Inc.)
S2 AdobeActiveFileMonitor4.0; C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe [102400 2005-10-03] ()
S2 Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [116040 2008-09-10] (Apple Inc.)
S2 DDNIService; C:\Program Files\DDNI\DIBS\DDNIService.exe [166376 2008-04-07] (Digital Delivery Networks, Inc.)
S2 Diskeeper; C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe [634988 2006-11-15] (Diskeeper Corporation)
S2 LENOVO.MICMUTE; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [101736 2011-07-12] (Lenovo Group Limited)
S2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [127336 2011-07-12] (Lenovo Group Limited)
S2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [398184 2012-12-14] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [682344 2012-12-14] (Malwarebytes Corporation)
S2 MOBCleanup; C:\Users\Janette\AppData\Local\temp\MOBCleanup.exe [210272 2011-04-04] (McAfee, Inc.)
S3 MSSQL$MSSMLBIZ; c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S2 psqlWGE; C:\Program Files\Pervasive Software\PSQL\bin\w3dbsmgr.exe [435496 2009-04-06] (Pervasive Software Inc.)
S2 PwmEWSvc; C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE [1665120 2012-05-16] (Lenovo Group Limited)
S2 Seagate-Replica-Service; C:\Program Files\Seagate Replica\bin\Seagate-Replica-Service.exe [1818624 2009-04-10] ()
S2 Seagate-Replica-SysMon; C:\Program Files\Seagate Replica\bin\Seagate-Replica-SysMon.exe [78288 2009-04-10] ()
S2 SUService; c:\program files\lenovo\system update\suservice.exe [28672 2011-07-26] (Lenovo Group Limited)
S2 TPHKLOAD; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [131432 2011-07-12] (Lenovo Group Limited)
S2 TSSCoreService; C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe [722232 2007-08-09] (IBM)
S2 TVT Backup Protection Service; C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe [569344 2007-01-08] ()
S2 TVT Scheduler; c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe [1122304 2008-04-06] (Lenovo Group Limited)
S3 GameConsoleService;
S2 helpsvc; %WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll [x]
S4 mfefire; "C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe" [x]
S2 mfevtp; "C:\Windows\system32\mfevtps.exe" [x]
S2 MOBKbackup; "C:\Program Files\McAfee Online Backup\MOBKbackup.exe" [x]
==================== Drivers (Whitelisted) ====================
S3 Eplpdx02; C:\Windows\system32\Drivers\EPLPDX02.SYS [70084 2001-08-09] (MK Systems CO., LTD.)
R3 LenovoRd; C:\Windows\System32\Drivers\LenovoRd.sys [81280 2007-06-07] (Lenovo)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [21104 2012-12-14] (Malwarebytes Corporation)
S3 mferkdk; C:\Windows\System32\drivers\mferkdk.sys [34248 2009-09-16] (McAfee, Inc.)
S3 mfesmfk; C:\Windows\System32\drivers\mfesmfk.sys [40552 2009-09-16] (McAfee, Inc.)
S1 MOBKFilter; C:\Windows\System32\DRIVERS\MOBK.sys [54776 2010-04-13] (Mozy, Inc.)
R3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [14736 2009-05-09] (Microsoft Corporation)
U3 TrueSight; c:\windows\system32\drivers\TrueSight.sys [14080 2012-07-12] ()
S3 TvtDrv; C:\Program Files\Common Files\Lenovo\InvAgent\TvtDrv.sys [3712 2007-01-08] ()
S4 blbdrive; No ImagePath
S3 catchme; \??\C:\Users\Janette\AppData\Local\Temp\catchme.sys [x]
S0 cfwids; system32\drivers\cfwids.sys [x]
S3 IpInIp; No ImagePath
S2 MCSTRM; No ImagePath
S0 mfeapfk; system32\drivers\mfeapfk.sys [x]
S0 mfeavfk; system32\drivers\mfeavfk.sys [x]
S0 mfebopk; system32\drivers\mfebopk.sys [x]
S0 mfefirek; system32\drivers\mfefirek.sys [x]
R0 mfehidk; system32\drivers\mfehidk.sys [x]
R1 mfewfpk; system32\drivers\mfewfpk.sys [x]
S3 NwlnkFlt; No ImagePath
S3 NwlnkFwd; No ImagePath
S3 UIUSys; No ImagePath
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-06-09 22:37 - 2013-06-09 22:37 - 01358931 ____A (Farbar) C:\Users\Janette\Downloads\FRST.exe
2013-06-09 21:35 - 2013-06-09 22:32 - 00000686 ____A C:\Windows\Tasks\McAfee Cleanup.job
2013-06-09 21:34 - 2013-06-09 21:34 - 03191888 ____A (McAfee, Inc.) C:\Users\Janette\Downloads\MCPR.exe
2013-06-09 21:21 - 2013-06-09 21:21 - 00000000 ____D C:\F
2013-06-09 21:20 - 2013-06-09 21:20 - 00000064 ____A C:\Windows\System32\TPAPSLOG.LOG
2013-06-05 12:11 - 2013-06-05 12:11 - 00049935 ____A C:\ComboFix.txt
2013-06-05 11:58 - 2011-06-25 23:45 - 00256000 ____A C:\Windows\PEV.exe
2013-06-05 11:58 - 2010-11-07 10:20 - 00208896 ____A C:\Windows\MBR.exe
2013-06-05 11:58 - 2009-04-19 21:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-06-05 11:58 - 2000-08-30 17:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-06-05 11:58 - 2000-08-30 17:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-06-05 11:58 - 2000-08-30 17:00 - 00098816 ____A C:\Windows\sed.exe
2013-06-05 11:58 - 2000-08-30 17:00 - 00080412 ____A C:\Windows\grep.exe
2013-06-05 11:58 - 2000-08-30 17:00 - 00068096 ____A C:\Windows\zip.exe
2013-06-05 11:42 - 2013-06-05 11:57 - 00001257 ____A C:\Users\Janette\Desktop\usersJanettedownloadsComboFix.exe - Shortcut.lnk
2013-06-05 10:14 - 2013-06-05 10:14 - 00000000 ____D C:\E
2013-06-05 09:23 - 2013-06-05 12:11 - 00000000 ____D C:\Qoobox
2013-06-05 09:22 - 2013-06-05 11:57 - 05077652 ____R (Swearware) C:\Users\Janette\Downloads\ComboFix.exe
2013-06-05 07:12 - 2013-06-05 07:12 - 00000000 ____D C:\D
2013-06-05 05:12 - 2013-06-05 05:12 - 00000116 ____A C:\tvttemp.txt
2013-06-05 05:11 - 2013-06-09 22:38 - 00000000 ____D C:\users\Administrator
2013-06-05 05:11 - 2013-06-05 05:11 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Lenovo
2013-06-04 19:51 - 2013-06-04 19:51 - 00000000 ____D C:\Users\Janette\Documents\mbar-1.06.0.1003
2013-06-04 18:42 - 2013-06-04 18:42 - 02708759 ____A C:\Users\Janette\Desktop\debug.log
2013-06-04 18:19 - 2013-06-04 19:41 - 00000000 ____D C:\Users\Janette\Desktop\RK_Quarantine
2013-06-04 08:04 - 2013-06-04 08:05 - 00017139 ____A C:\Users\Janette\Desktop\dds.txt
2013-06-04 08:04 - 2013-06-04 08:05 - 00013829 ____A C:\Users\Janette\Desktop\attach.txt
2013-06-03 15:27 - 2013-06-03 15:27 - 00000000 ____D C:\ProgramData\AVAST Software
2013-06-03 15:27 - 2013-06-03 15:27 - 00000000 ____D C:\Program Files\AVAST Software
2013-05-31 19:20 - 2013-06-04 08:57 - 00109056 ____A C:\Users\Janette\Documents\8.5x11 blank template.pub
2013-05-24 20:20 - 2013-06-05 01:03 - 00000000 ____D C:\Users\Janette\Documents\Tacoma film Festival
2013-05-24 20:20 - 2013-06-05 01:03 - 00000000 ____D C:\Users\Janette\Documents\Cartoons
2013-05-15 03:16 - 2013-05-05 12:25 - 12324864 ____N (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-05-15 03:16 - 2013-05-05 12:12 - 02382848 ____N (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-05-15 03:02 - 2013-04-04 14:57 - 00420864 ____N (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-05-15 03:02 - 2013-04-04 14:54 - 00073216 ____N (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-15 03:01 - 2013-04-04 15:11 - 01800704 ____N (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-15 03:01 - 2013-04-04 15:09 - 09738752 ____N (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-05-15 03:01 - 2013-04-04 15:02 - 01427968 ____N (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-05-15 03:01 - 2013-04-04 15:02 - 01129472 ____N (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-05-15 03:01 - 2013-04-04 15:02 - 01104384 ____N (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-05-15 03:01 - 2013-04-04 15:01 - 00231936 ____N (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-15 03:01 - 2013-04-04 14:59 - 00065024 ____N (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-05-15 03:01 - 2013-04-04 14:58 - 00717824 ____N (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-05-15 03:01 - 2013-04-04 14:58 - 00142848 ____N (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-05-15 03:01 - 2013-04-04 14:56 - 00607744 ____N (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-05-15 03:01 - 2013-04-04 14:55 - 01796096 ____N (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-05-15 03:01 - 2013-04-04 14:50 - 00176640 ____N (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-05-15 01:25 - 2013-04-15 07:20 - 00638328 ____N (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-15 01:25 - 2013-04-13 03:56 - 00037376 ____N (Microsoft Corporation) C:\Windows\System32\cdd.dll
2013-05-15 01:24 - 2013-04-08 18:36 - 02049024 ____N (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-05-14 16:37 - 2013-05-14 17:57 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-05-13 09:24 - 2013-05-13 09:24 - 03097600 ____N C:\Users\Janette\Documents\Out of the stall frame comp.pub
2013-05-11 14:42 - 2013-05-11 14:42 - 00235080 ____N (Big Fish Games) C:\Users\Janette\Downloads\bigfishgames_p30278468_s1_l1(6).exe
==================== One Month Modified Files and Folders ========
2013-06-09 22:38 - 2013-06-05 05:11 - 00000000 ____D C:\users\Administrator
2013-06-09 22:37 - 2013-06-09 22:37 - 01358931 ____A (Farbar) C:\Users\Janette\Downloads\FRST.exe
2013-06-09 22:32 - 2013-06-09 21:35 - 00000686 ____A C:\Windows\Tasks\McAfee Cleanup.job
2013-06-09 22:19 - 2011-12-10 10:44 - 00000000 ____D C:\Program Files\McAfee Online Backup
2013-06-09 22:17 - 2013-04-23 16:00 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-09 22:15 - 2008-02-05 15:34 - 00000000 ____D C:\Program Files\McAfee
2013-06-09 21:39 - 2008-02-05 15:34 - 00000000 ____D C:\Program Files\Common Files\McAfee
2013-06-09 21:35 - 2006-11-02 06:01 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-09 21:34 - 2013-06-09 21:34 - 03191888 ____A (McAfee, Inc.) C:\Users\Janette\Downloads\MCPR.exe
2013-06-09 21:25 - 2008-02-05 10:40 - 00002032 ____A C:\Users\Janette\AppData\Local\d3d9caps.dat
2013-06-09 21:21 - 2013-06-09 21:21 - 00000000 ____D C:\F
2013-06-09 21:20 - 2013-06-09 21:20 - 00000064 ____A C:\Windows\System32\TPAPSLOG.LOG
2013-06-09 21:20 - 2012-02-09 14:09 - 00096026 ____A C:\Windows\PFRO.log
2013-06-09 21:20 - 2006-11-02 05:47 - 00003696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-09 21:20 - 2006-11-02 05:47 - 00003696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-05 12:11 - 2013-06-05 12:11 - 00049935 ____A C:\ComboFix.txt
2013-06-05 12:11 - 2013-06-05 09:23 - 00000000 ____D C:\Qoobox
2013-06-05 11:59 - 2006-11-02 04:18 - 00000000 ___RD C:\users\Public
2013-06-05 11:57 - 2013-06-05 11:42 - 00001257 ____A C:\Users\Janette\Desktop\usersJanettedownloadsComboFix.exe - Shortcut.lnk
2013-06-05 11:57 - 2013-06-05 09:22 - 05077652 ____R (Swearware) C:\Users\Janette\Downloads\ComboFix.exe
2013-06-05 10:45 - 2008-02-01 02:31 - 00000000 ____D C:\SWSHARE
2013-06-05 10:33 - 2006-11-02 03:33 - 00841748 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-05 10:14 - 2013-06-05 10:14 - 00000000 ____D C:\E
2013-06-05 07:12 - 2013-06-05 07:12 - 00000000 ____D C:\D
2013-06-05 05:15 - 2006-11-02 05:47 - 03882520 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-05 05:12 - 2013-06-05 05:12 - 00000116 ____A C:\tvttemp.txt
2013-06-05 05:11 - 2013-06-05 05:11 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Lenovo
2013-06-05 05:06 - 2006-11-02 05:37 - 00000000 ____D C:\Windows\System32\XPSViewer
2013-06-05 05:06 - 2006-11-02 05:37 - 00000000 ____D C:\Windows\System32\restore
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\tapi
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\zh-TW
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\zh-CN
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\uk-UA
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\th-TH
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\sv-SE
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\sr-Latn-CS
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\SLUI
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\sl-SI
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\sk-SK
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\ru-RU
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\ras
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\pt-PT
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\pt-BR
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\pl-PL
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\nl-NL
2013-06-05 05:06 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\nb-NO
2013-06-05 05:05 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\Msdtc
2013-06-05 05:05 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\lv-LV
2013-06-05 05:05 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\lt-LT
2013-06-05 05:05 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\ko-KR
2013-06-05 05:05 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\ja-JP
2013-06-05 05:05 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\it-IT
2013-06-05 05:05 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\icsxml
2013-06-05 05:05 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\hu-HU
2013-06-05 05:05 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\hr-HR
2013-06-05 05:05 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\he-IL
2013-06-05 05:05 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\fr-FR
2013-06-05 05:05 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\fi-FI
2013-06-05 05:05 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\et-EE
2013-06-05 05:05 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\el-GR
2013-06-05 05:04 - 2008-02-01 02:43 - 00000000 ____D C:\Windows\System32\DLA
2013-06-05 05:04 - 2008-02-01 02:34 - 00000000 ___HD C:\Windows\System32\(null)
2013-06-05 05:04 - 2006-11-02 05:37 - 00000000 ____D C:\Windows\ShellNew
2013-06-05 05:04 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\de-DE
2013-06-05 05:04 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\com
2013-06-05 05:04 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\bg-BG
2013-06-05 05:04 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\ar-SA
2013-06-05 05:03 - 2006-11-09 18:04 - 00000000 ____D C:\Windows\Panther
2013-06-05 05:03 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\registration
2013-06-05 05:03 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\MSAgent
2013-06-05 05:03 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\L2Schemas
2013-06-05 05:03 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\Help
2013-06-05 05:02 - 2008-02-05 13:56 - 00000000 ___HD C:\Users\Janette\Documents\Stiles Collection Misc. Forms and Business Cards
2013-06-05 05:02 - 2008-02-05 12:16 - 00000000 ____D C:\Users\Janette\AppData\Roaming\Thunderbird
2013-06-05 05:02 - 2008-02-05 10:40 - 00000000 ____D C:\users\Janette
2013-06-05 05:02 - 2008-02-01 01:28 - 00000000 ____D C:\WAUUPGRD
2013-06-05 05:02 - 2006-11-09 12:54 - 00000000 ____D C:\SWTOOLS
2013-06-05 05:02 - 2006-11-02 04:18 - 00000000 __RHD C:\users\Default
2013-06-05 05:02 - 2006-11-02 04:18 - 00000000 ____D
2013-06-05 05:02 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\Cursors
2013-06-05 05:01 - 2008-02-06 12:39 - 00000000 ___HD C:\ProgramData\SiteAdvisor
2013-06-05 05:01 - 2008-02-01 03:26 - 00000000 ____D C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
2013-06-05 05:01 - 2008-02-01 03:20 - 00000000 ____D C:\Program Files\Sonic Icons for Lenovo
2013-06-05 05:01 - 2008-02-01 02:42 - 00000000 ___HD C:\ProgramData\Sonic
2013-06-05 05:01 - 2008-02-01 02:42 - 00000000 ____D C:\Program Files\Roxio
2013-06-05 05:01 - 2006-11-02 05:37 - 00000000 ____D C:\Program Files\Windows Defender
2013-06-05 05:00 - 2008-02-06 12:10 - 00000000 ____D C:\Program Files\Microsoft CAPICOM 2.1.0.2
2013-06-05 05:00 - 2008-02-01 03:24 - 00000000 ____D C:\Program Files\Microsoft Works
2013-06-05 05:00 - 2008-02-01 02:43 - 00000000 ____D C:\Program Files\Common Files\SureThing Shared
2013-06-05 05:00 - 2008-02-01 02:42 - 00000000 ____D C:\Program Files\Common Files\Sonic Shared
2013-06-05 05:00 - 2008-02-01 02:23 - 00000000 ____D C:\Program Files\Common Files\snp2uvc
2013-06-05 05:00 - 2008-02-01 02:19 - 00000000 ____D C:\Program Files\Digital Line Detect
2013-06-05 05:00 - 2008-02-01 02:14 - 00000000 ____D C:\Program Files\Lenovo
2013-06-05 05:00 - 2006-11-02 04:18 - 00000000 ____D C:\Program Files\Common Files\Services
2013-06-05 04:59 - 2008-02-01 03:24 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2013-06-05 04:59 - 2008-02-01 02:42 - 00000000 ____D C:\Program Files\Common Files\PX Storage Engine
2013-06-05 04:59 - 2008-02-01 02:34 - 00000000 ____D C:\Program Files\Common Files\Lenovo
2013-06-05 04:43 - 2009-07-09 13:57 - 00000000 ____D C:\Windows\System32\vi-VN
2013-06-05 04:43 - 2009-07-09 13:57 - 00000000 ____D C:\Windows\System32\eu-ES
2013-06-05 04:43 - 2009-07-09 13:29 - 00000000 ____D C:\Windows\System32\EventProviders
2013-06-05 04:43 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\ro-RO
2013-06-05 04:43 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\ias
2013-06-05 04:42 - 2012-07-11 10:45 - 00000000 ____D C:\Windows\System32\config\RCCBakup
2013-06-05 04:42 - 2006-11-02 04:18 - 00000000 ___HD C:\Windows\System32\config\Journal
2013-06-05 04:41 - 2012-07-10 15:26 - 00000000 ____D C:\Windows\pss
2013-06-05 04:41 - 2011-06-17 20:11 - 00000000 ____D C:\Windows\PeachInst
2013-06-05 04:41 - 2009-10-15 09:15 - 00000000 ____D C:\Windows\SQL9_KB970892_ENU
2013-06-05 04:41 - 2009-07-09 13:57 - 00000000 ____D C:\Windows\System32\ca-ES
2013-06-05 04:41 - 2009-02-12 08:41 - 00000000 ____D C:\Windows\SQL9_KB960089_ENU
2013-06-05 04:41 - 2008-07-09 03:01 - 00000000 ____D C:\Windows\SQL9_KB948109_ENU
2013-06-05 04:41 - 2006-11-02 04:18 - 00000000 ___RD C:\Windows\Offline Web Pages
2013-06-05 04:41 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\AdvancedInstallers
2013-06-05 04:41 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\rescache
2013-06-05 04:41 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-06-05 04:34 - 2010-06-24 19:16 - 00000000 ____D C:\Windows\hpoj6000e609
2013-06-05 04:34 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\IME
2013-06-05 04:33 - 2006-11-02 05:37 - 00000000 ____D C:\Windows\DigitalLocker
2013-06-05 04:29 - 2008-09-12 13:26 - 00000000 ____D C:\Users\Janette\{f606a019-4024-4ff7-8989-d0a2c7e4ed9f}
2013-06-05 04:29 - 2006-11-02 05:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-06-05 04:25 - 2012-07-19 09:10 - 00000000 ___HD C:\Users\Janette\Downloads\Rebit
2013-06-05 04:25 - 2011-03-01 09:07 - 00000000 ___HD C:\Users\Janette\Downloads\__MACOSX
2013-06-05 04:24 - 2013-04-10 12:56 - 00000000 ____D C:\Users\Janette\Documents\Out of the stall comps and stuff
2013-06-05 04:24 - 2013-03-21 13:21 - 00000000 ____D C:\Users\Janette\Documents\Ocean Shores entries
2013-06-05 04:24 - 2013-03-03 09:56 - 00000000 ____D C:\Users\Janette\Documents\Puyallup Fair projects
2013-06-05 04:24 - 2013-02-11 20:00 - 00000000 ____D C:\Users\Janette\Documents\Neighborhood Crap
2013-06-05 04:24 - 2013-01-20 12:17 - 00000000 ____D C:\Users\Janette\Documents\Rollie Photos only used in video January 2013
2013-06-05 04:24 - 2013-01-15 19:32 - 00000000 ____D C:\Users\Janette\Documents\Rollie
2013-06-05 04:24 - 2013-01-11 21:34 - 00000000 ____D C:\Users\Janette\Documents\Proctor Arts Fest 2013
2013-06-05 04:24 - 2012-12-08 16:17 - 00000000 ____D C:\Users\Janette\Documents\TAC Awards Projects
2013-06-05 04:24 - 2010-05-24 19:00 - 00000000 ___HD C:\Users\Janette\Documents\Stiles, Phyllis info and legal
2013-06-05 04:24 - 2009-02-05 15:40 - 00000000 ___HD C:\Users\Janette\Documents\Rollie's Radios
2013-06-05 04:24 - 2008-02-10 13:48 - 00000000 ___RD C:\Users\Janette\Documents\Stiles Collection Catalog of Art
2013-06-05 04:24 - 2008-02-09 14:32 - 00000000 ___HD C:\Users\Janette\Documents\Stiles Collection Work Sheets
2013-06-05 04:24 - 2008-02-09 14:31 - 00000000 ___HD C:\Users\Janette\Documents\Stiles Collection Paintings 2013
2013-06-05 04:23 - 2013-01-30 12:09 - 00000000 ____D C:\Users\Janette\Documents\Artwork New in 2013
2013-06-05 04:23 - 2013-01-10 15:09 - 00000000 ____D C:\Users\Janette\Documents\Light painting photos coverted
2013-06-05 04:23 - 2013-01-07 20:36 - 00000000 ____D C:\Users\Janette\Documents\Mandala project 2013
2013-06-05 04:23 - 2012-11-21 12:58 - 00000000 ____D C:\Users\Janette\Documents\Artwork for GLOBAL COLORS Video
2013-06-05 04:23 - 2012-11-04 11:42 - 00000000 ____D C:\Users\Janette\Documents\Facebook
2013-06-05 04:23 - 2012-08-03 20:07 - 00000000 ____D C:\Users\Janette\Documents\Joe's e-mails
2013-06-05 04:23 - 2011-12-13 14:17 - 00000000 ___HD C:\Users\Janette\Documents\BookSmartData
2013-06-05 04:23 - 2010-12-29 12:12 - 00000000 ___HD C:\Users\Janette\Documents\HCG info
2013-06-05 04:23 - 2010-10-08 15:52 - 00000000 ____D C:\Users\Janette\Documents\Joe Misc and Medical
2013-06-05 04:23 - 2009-07-08 15:50 - 00000000 ___HD C:\Users\Janette\Documents\Janette Correspondence and self portraits
2013-06-05 04:22 - 2013-04-23 15:52 - 00000000 ____D C:\Users\Janette\Documents\Art Show Photos
2013-06-05 04:22 - 2012-07-18 12:35 - 00000000 ____D C:\Users\Janette\Documents\Artists Resume and Statement
2013-06-05 04:22 - 2009-05-21 10:11 - 00000000 ___HD C:\Users\Janette\Documents\Anne Bray Correspondence
2013-06-05 04:21 - 2012-07-12 21:22 - 00000000 ____D C:\Users\Janette\AppData\Roaming\PwrMgr
2013-06-05 04:21 - 2011-10-22 18:41 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\PeaceCraft2
2013-06-05 04:21 - 2011-10-22 17:36 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Peace Craft
2013-06-05 04:21 - 2011-10-03 20:28 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Realore_Whiterra Roads Of Rome 3
2013-06-05 04:21 - 2011-06-13 10:10 - 00000000 ____D C:\Users\Janette\Citrix
2013-06-05 04:21 - 2010-12-21 21:32 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Realore_Whiterra Roads Of Rome 2
2013-06-05 04:21 - 2010-11-06 17:31 - 00000000 ____D C:\Users\Janette\AppData\Roaming\Realore_Whiterra Roads Of Rome
2013-06-05 04:21 - 2009-06-16 20:03 - 00000000 ____D C:\Users\Janette\AppData\Roaming\SystemRequirementsLab
2013-06-05 04:21 - 2008-12-20 12:37 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Real
2013-06-05 04:21 - 2008-12-01 15:31 - 00000000 ___HD C:\Users\Janette\Documents\Address Labels
2013-06-05 04:21 - 2008-06-06 19:31 - 00000000 ____D C:\Users\Janette\AppData\Roaming\SpinTop
2013-06-05 04:16 - 2012-07-21 14:39 - 00000000 ____D C:\Users\Janette\AppData\Roaming\DriverCure
2013-06-05 04:16 - 2010-09-05 15:02 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Enlightenus2SE_BFG
2013-06-05 04:16 - 2010-07-02 09:35 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\HpUpdate
2013-06-05 04:16 - 2010-01-17 19:09 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Enlightenus
2013-06-05 04:16 - 2009-12-30 20:46 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\GhostFleet
2013-06-05 04:16 - 2009-03-15 19:04 - 00000000 ____D C:\Users\Janette\AppData\Roaming\Lost in the City
2013-06-05 04:16 - 2009-02-15 21:47 - 00000000 ____D C:\Users\Janette\AppData\Roaming\Coyotes Tale
2013-06-05 04:16 - 2009-01-18 19:19 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Ancient Quest of Saqqarah__bfg
2013-06-05 04:16 - 2008-08-03 19:30 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\ForgottenRiddles2
2013-06-05 04:16 - 2008-06-15 18:30 - 00000000 ____D C:\Users\Janette\AppData\Roaming\GameHouse
2013-06-05 04:16 - 2008-02-09 14:44 - 00000000 ____D C:\Users\Janette\AppData\Roaming\FUJIFILM
2013-06-05 04:14 - 2008-02-05 10:45 - 00000000 ___HD C:\Users\Janette\AppData\Local\Roxio
2013-06-05 04:13 - 2011-12-13 14:17 - 00000000 ____D C:\Users\Janette\.blurb
2013-06-05 04:13 - 2011-05-23 13:48 - 00000000 ___HD C:\Users\Janette\AppData\Local\Help
2013-06-05 04:13 - 2010-03-26 15:54 - 00000000 ___HD C:\Users\Janette\AppData\Local\Brain Games Mahjongg Files
2013-06-05 04:13 - 2008-11-14 22:28 - 00000000 ___HD C:\Users\Janette\AppData\Local\Game Mill Files
2013-06-05 04:13 - 2008-02-16 13:12 - 00000000 ____D C:\Users\Janette\AppData\Local\Microsoft Help
2013-06-05 04:10 - 2011-09-04 12:05 - 00000000 ___HD C:\ProgramData\regid.1986-12.com.adobe
2013-06-05 04:10 - 2010-06-24 19:20 - 00000000 ___HD C:\ProgramData\WEBREG
2013-06-05 04:10 - 2009-12-27 14:00 - 00000000 ___HD C:\ProgramData\The Mirror Mysteries
2013-06-05 04:10 - 2009-06-20 13:08 - 00000000 __HDC C:\ProgramData\{66E2F539-12B6-4870-A500-7689CDE75C5E}
2013-06-05 04:10 - 2008-02-09 13:31 - 00000000 ___HD C:\ProgramData\QuickTime
2013-06-05 04:09 - 2009-02-10 16:01 - 00000000 ___HD C:\ProgramData\MysteryChronicles
2013-06-05 04:09 - 2008-07-30 15:48 - 00000000 ___HD C:\ProgramData\MonteCristo
2013-06-05 04:09 - 2008-06-15 18:43 - 00000000 ____D C:\ProgramData\n7-89-o9-3r-4t-r9
2013-06-05 04:09 - 2008-02-01 03:22 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-05 04:08 - 2008-02-05 11:09 - 00000000 ____D C:\ProgramData\McAfee
2013-06-05 04:07 - 2010-07-02 09:33 - 00000000 ____D C:\ProgramData\HP Product Assistant
2013-06-05 04:07 - 2009-06-20 13:03 - 00000000 ___HD C:\ProgramData\DriverScanner
2013-06-05 04:07 - 2008-07-27 18:43 - 00000000 ___HD C:\ProgramData\Arcade Lab
2013-06-05 04:06 - 2012-07-31 21:06 - 00000000 ____D C:\Program Files\Seagate Replica
2013-06-05 04:06 - 2009-10-31 03:09 - 00000000 ____D C:\Program Files\Windows Portable Devices
2013-06-05 04:06 - 2009-06-16 20:04 - 00000000 ____D C:\Program Files\SystemRequirementsLab
2013-06-05 04:06 - 2008-02-05 10:40 - 00000000 ____D C:\Program Files\Windows Live Toolbar
2013-06-05 04:06 - 2006-11-02 05:37 - 00000000 ____D C:\Program Files\Windows Calendar
2013-06-05 04:05 - 2013-04-18 20:52 - 00000000 ____D C:\Program Files\QuickTime
2013-06-05 04:05 - 2008-12-20 12:37 - 00000000 ____D C:\Program Files\Rhapsody
2013-06-05 04:04 - 2013-04-12 09:59 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-05 04:03 - 2006-11-02 05:42 - 00000000 ____D C:\Windows\WindowsMobile
2013-06-05 04:02 - 2012-07-11 14:36 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-06-05 04:02 - 2011-02-24 04:03 - 00000000 ____D C:\Windows\System32\WindowsPowerShell
2013-06-05 04:02 - 2006-11-02 05:42 - 00000000 ____D C:\Windows\System32\winrm
2013-06-05 04:02 - 2006-11-02 05:42 - 00000000 ____D C:\Windows\System32\WCN
2013-06-05 04:02 - 2006-11-02 04:18 - 00000000 ___HD C:\Windows\System32\winevt
2013-06-05 04:02 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\Web
2013-06-05 04:01 - 2006-11-02 05:42 - 00000000 ____D C:\Windows\System32\slmgr
2013-06-05 04:01 - 2006-11-02 05:42 - 00000000 ____D C:\Windows\System32\Printing_Admin_Scripts
2013-06-05 04:01 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\SMI
2013-06-05 04:01 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\RemInst
2013-06-05 04:00 - 2008-02-01 02:27 - 00000000 ____D C:\Windows\System32\Lang
2013-06-05 04:00 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\networklist
2013-06-05 04:00 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\MUI
2013-06-05 04:00 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\LogFiles
2013-06-05 04:00 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\licensing
2013-06-05 03:59 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\IME
2013-06-05 03:58 - 2012-07-14 15:41 - 00000000 ____D C:\Program Files\Free Download Manager
2013-06-05 03:58 - 2011-02-23 19:34 - 00000000 ____D C:\Program Files\FinePixViewer
2013-06-05 03:58 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\DriverStore
2013-06-05 03:57 - 2012-11-14 15:02 - 00000000 ____D C:\Program Files\ConvertHelper
2013-06-05 03:57 - 2011-06-17 21:03 - 00000000 ____D C:\Program Files\Common Files\Peach
2013-06-05 03:56 - 2011-09-04 11:05 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2013-06-05 03:54 - 2012-03-26 19:02 - 00000000 ____D C:\Program Files\Adobe Download Assistant
2013-06-05 03:54 - 2012-02-14 16:14 - 00000000 ____D C:\Program Files\Bonjour
2013-06-05 03:52 - 2012-07-12 21:14 - 00000000 ____D C:\FRST
2013-06-05 03:52 - 2008-02-08 16:55 - 00000000 ____D C:\EPSONREG
2013-06-05 03:52 - 2008-02-01 02:35 - 00000000 ____D C:\Icons
2013-06-05 03:50 - 2006-11-02 04:18 - 00000000 ___HD C:\Windows\System32\wfp
2013-06-05 03:50 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\System32\spool
2013-06-05 03:48 - 2012-07-21 12:33 - 00000000 ____D C:\Windows\Sun
2013-06-05 03:48 - 2008-07-11 13:06 - 00000000 ____D C:\Windows\System32\Adobe
2013-06-05 03:48 - 2006-11-02 05:42 - 00000000 ___HD C:\Windows\System32\Branding
2013-06-05 03:43 - 2008-02-01 03:24 - 00000000 ____D C:\Windows\PCHEALTH
2013-06-05 03:43 - 2006-11-02 05:37 - 00000000 ____D C:\Windows\Performance
2013-06-05 03:43 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\security
2013-06-05 03:43 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\schemas
2013-06-05 03:43 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\Resources
2013-06-05 03:43 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\Provisioning
2013-06-05 03:43 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\PLA
2013-06-05 03:43 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\nap
2013-06-05 03:41 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\LiveKernelReports
2013-06-05 03:39 - 2010-07-02 09:35 - 00000000 ____D C:\Windows\Hewlett-Packard
2013-06-05 03:38 - 2008-02-01 02:58 - 00000000 ____D C:\Windows\Downloaded Installations
2013-06-05 03:38 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\Branding
2013-06-05 03:37 - 2012-07-25 09:25 - 00000000 ____D C:\Users\Janette\Yahoo SiteBuilder
2013-06-05 03:37 - 2012-04-03 20:20 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers
2013-06-05 03:37 - 2010-01-18 20:59 - 00000000 ___HD C:\Users\Public\Documents\bigfish
2013-06-05 03:37 - 2009-05-16 15:02 - 00000000 ___HD C:\Users\Public\Documents\Slapdash Games
2013-06-05 03:35 - 2012-07-25 09:12 - 00000000 ____D C:\Users\Janette\sitebuilder
2013-06-05 03:35 - 2012-04-13 16:56 - 00000000 ___HD C:\Users\Janette\Downloads\Driver Tool
2013-06-05 03:34 - 2012-07-21 14:39 - 00000000 ____D C:\Users\Janette\AppData\Roaming\SpeedyPC Software
2013-06-05 03:34 - 2011-12-28 16:23 - 00000000 ___HD C:\Users\Janette\Documents\Amazon MP3
2013-06-05 03:34 - 2011-10-22 19:56 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\YoudaGames
2013-06-05 03:34 - 2011-09-04 12:11 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\PDAppFlex
2013-06-05 03:34 - 2011-06-19 19:27 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\WendigoStudios
2013-06-05 03:34 - 2011-06-17 21:13 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Peachtree
2013-06-05 03:34 - 2011-05-16 12:48 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\POV-Ray
2013-06-05 03:34 - 2010-09-16 14:04 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Vogat Interactive
2013-06-05 03:34 - 2010-07-31 16:16 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Vast Studios
2013-06-05 03:34 - 2010-06-18 07:12 - 00000000 ____D C:\Users\Janette\AppData\Roaming\Update
2013-06-05 03:34 - 2010-01-29 19:44 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\SevenSails
2013-06-05 03:34 - 2010-01-01 12:56 - 00000000 ____D C:\Users\Janette\AppData\Roaming\Skunk Studios
2013-06-05 03:34 - 2009-12-22 16:44 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Scholastic
2013-06-05 03:34 - 2009-06-20 13:03 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Uniblue
2013-06-05 03:34 - 2009-02-28 19:17 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\SerpentOfIsis
2013-06-05 03:34 - 2008-06-23 20:44 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\WildTangent
2013-06-05 03:34 - 2008-06-23 19:24 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\VeniceMysteryData
2013-06-05 03:34 - 2008-06-07 11:53 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\PlayFirst
2013-06-05 03:34 - 2008-02-05 12:07 - 00000000 ____D C:\Users\Janette\AppData\Roaming\Talkback
2013-06-05 03:33 - 2012-04-15 10:38 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\PCDr
2013-06-05 03:33 - 2009-11-30 19:45 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Orneon
2013-06-05 03:33 - 2009-11-20 16:29 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\MysteryStudio
2013-06-05 03:33 - 2009-06-22 18:18 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\NCH Swift Sound
2013-06-05 03:05 - 2010-12-03 23:47 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\FastStone
2013-06-05 03:05 - 2010-09-18 12:13 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Freeze Tag
2013-06-05 03:05 - 2010-01-20 11:40 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Flood Light Games
2013-06-05 03:05 - 2009-10-11 17:49 - 00000000 ____D C:\Users\Janette\AppData\Roaming\ERS G-Studio
2013-06-05 03:05 - 2009-01-18 15:18 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Meridian93
2013-06-05 03:05 - 2008-11-22 20:12 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\iWinArcade
2013-06-05 03:05 - 2008-11-05 13:40 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\InterVideo
2013-06-05 03:05 - 2008-08-30 14:36 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Google
2013-06-05 03:05 - 2008-06-17 19:33 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\iWin
2013-06-05 03:05 - 2008-02-23 12:04 - 00000000 ____D C:\Users\Janette\AppData\Roaming\Macromedia
2013-06-05 03:05 - 2008-02-08 17:08 - 00000000 ____D C:\Users\Janette\AppData\Roaming\EPSON
2013-06-05 03:05 - 2008-02-08 16:49 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\InstallShield
2013-06-05 03:05 - 2008-02-05 12:39 - 00000000 ____D C:\Users\Janette\AppData\Roaming\McAfee
2013-06-05 03:05 - 2008-02-05 11:16 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Leadertech
2013-06-05 03:05 - 2008-02-05 10:45 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Lenovo
2013-06-05 03:04 - 2012-12-02 18:05 - 00000000 ____D C:\Users\Janette\AppData\Local\Xenocode
2013-06-05 03:04 - 2012-02-09 16:08 - 00000000 ____D C:\Users\Janette\AppData\Local\VS Revo Group
2013-06-05 03:04 - 2011-09-04 14:31 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2013-06-05 03:04 - 2011-09-04 11:06 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
2013-06-05 03:04 - 2011-06-19 19:18 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Elephant Games
2013-06-05 03:04 - 2010-10-09 15:11 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Artifex Mundi
2013-06-05 03:04 - 2010-03-19 18:21 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\AzuazGames
2013-06-05 03:04 - 2010-01-26 20:12 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\BigFishGames
2013-06-05 03:04 - 2009-10-17 16:09 - 00000000 ____D C:\Users\Janette\AppData\Roaming\Awem
2013-06-05 03:04 - 2009-07-01 14:08 - 00000000 ____D C:\Users\Janette\AppData\Roaming\Downloaded Installations
2013-06-05 03:04 - 2009-06-22 16:03 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Amazon
2013-06-05 03:04 - 2009-02-14 10:26 - 00000000 ____D C:\Users\Janette\AppData\Roaming\CatmoonGames
2013-06-05 03:04 - 2008-10-09 09:32 - 00000000 ____D C:\Users\Janette\AppData\Roaming\Canneverbe_Limited
2013-06-05 03:04 - 2008-09-13 12:34 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\Apple Computer
2013-06-05 03:04 - 2008-08-12 12:21 - 00000000 ____D C:\Users\Janette\AppData\Roaming\Big Fish Games
2013-06-05 03:04 - 2008-06-18 19:02 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\AlwaysNeat
2013-06-05 03:04 - 2008-06-14 12:56 - 00000000 ___HD C:\Users\Janette\AppData\Roaming\cerasus.media
2013-06-05 03:04 - 2008-02-05 10:45 - 00000000 ____D C:\Users\Janette\AppData\Roaming\Adobe
2013-06-05 03:04 - 2008-02-05 10:40 - 00000000 ____D C:\Users\Janette\AppData\Local\VirtualStore
2013-06-05 03:03 - 2008-02-05 12:16 - 00000000 ___HD C:\Users\Janette\AppData\Local\Thunderbird
2013-06-05 03:02 - 2009-05-16 15:02 - 00000000 ___HD C:\Users\Janette\AppData\Local\Slapdash Games
2013-06-05 03:02 - 2009-03-20 19:37 - 00000000 ___HD C:\Users\Janette\AppData\Local\Ph03nixNewMedia
2013-06-05 03:01 - 2012-12-02 18:13 - 00000000 ____D C:\Users\Janette\AppData\Local\Badger I.T
2013-06-05 03:01 - 2012-07-11 21:38 - 00000000 ____D C:\Users\Janette\AppData\Local\Lenovo
2013-06-05 03:01 - 2012-06-28 10:15 - 00000000 ___HD C:\Users\Janette\AppData\Local\Macromedia
2013-06-05 03:01 - 2012-02-08 12:18 - 00000000 ____D C:\Users\Janette\AppData\Local\BVRP Software
2013-06-05 03:01 - 2011-09-04 11:05 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-06-05 03:01 - 2011-09-04 11:05 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-06-05 03:01 - 2011-07-07 11:15 - 00000000 ___HD C:\Users\Janette\AppData\Local\IsolatedStorage
2013-06-05 03:01 - 2008-09-13 12:34 - 00000000 ___HD C:\Users\Janette\AppData\Local\Apple Computer
2013-06-05 03:01 - 2008-09-13 12:32 - 00000000 ___HD C:\Users\Janette\AppData\Local\Apple
2013-06-05 03:01 - 2008-08-29 19:52 - 00000000 ___HD C:\Users\Janette\AppData\Local\Google
2013-06-05 03:01 - 2008-06-06 19:31 - 00000000 ____D C:\Users\Janette\AppData\Local\JollyBear
2013-06-05 03:01 - 2008-05-09 19:49 - 00000000 ____D C:\Users\Janette\AppData\Local\Microsoft Games
2013-06-05 03:01 - 2008-02-05 13:59 - 00000000 ____D C:\Users\Janette\AppData\Local\Adobe
2013-06-05 02:55 - 2011-04-06 13:21 - 00000000 ___HD C:\ProgramData\WindowsSearch
2013-06-05 02:55 - 2008-08-09 21:47 - 00000000 ___HD C:\ProgramData\Zylom
2013-06-05 02:55 - 2008-06-23 20:44 - 00000000 ____D C:\ProgramData\WildTangent
2013-06-05 02:55 - 2008-02-07 14:47 - 00000000 ___HD C:\ProgramData\Xerox
2013-06-05 02:53 - 2012-07-21 14:38 - 00000000 ____D C:\ProgramData\SpeedyPC Software
2013-06-05 02:53 - 2010-03-30 09:40 - 00000000 ___HD C:\ProgramData\Sun
2013-06-05 02:53 - 2009-11-23 14:50 - 00000000 ____D C:\ProgramData\PCDr
2013-06-05 02:53 - 2009-07-06 20:03 - 00000000 ___HD C:\ProgramData\Trymedia
2013-06-05 02:53 - 2009-05-16 15:02 - 00000000 ___HD C:\ProgramData\Slapdash Games
2013-06-05 02:53 - 2009-01-07 16:24 - 00000000 ___HD C:\ProgramData\SpecialBit
2013-06-05 02:53 - 2008-12-24 14:07 - 00000000 ___HD C:\ProgramData\PlayPond
2013-06-05 02:53 - 2008-06-10 15:17 - 00000000 ___HD C:\ProgramData\VirtualFarm
2013-06-05 02:53 - 2008-06-09 20:23 - 00000000 ___HD C:\ProgramData\Playrix Entertainment
2013-06-05 02:53 - 2008-06-07 11:53 - 00000000 ___HD C:\ProgramData\PlayFirst
2013-06-05 02:53 - 2008-06-06 20:41 - 00000000 ____D C:\ProgramData\SpinTopV1005
2013-06-05 02:53 - 2008-02-01 03:15 - 00000000 ___HD C:\ProgramData\Symantec
2013-06-05 02:49 - 2012-04-13 19:55 - 00000000 ____D C:\ProgramData\Norton
2013-06-05 02:49 - 2010-09-07 19:56 - 00000000 ___HD C:\ProgramData\MumboJumbo
2013-06-05 02:49 - 2010-01-22 04:24 - 00000000 ___HD C:\ProgramData\Office Genuine Advantage
2013-06-05 02:49 - 2009-06-22 18:18 - 00000000 ___HD C:\ProgramData\NCH Swift Sound
2013-06-05 02:49 - 2009-06-20 13:23 - 00000000 ____D C:\ProgramData\PC Drivers HeadQuarters
2013-06-05 02:48 - 2009-01-18 15:19 - 00000000 ___HD C:\ProgramData\Meridian93
2013-06-05 02:48 - 2008-06-22 13:51 - 00000000 ___HD C:\ProgramData\Media Art
2013-06-05 02:46 - 2012-04-13 16:55 - 00000000 ____D C:\ProgramData\Driver Tool
2013-06-05 02:46 - 2011-06-19 19:18 - 00000000 ___HD C:\ProgramData\Elephant Games
2013-06-05 02:46 - 2010-06-30 19:24 - 00000000 ___HD C:\ProgramData\Google
2013-06-05 02:46 - 2010-06-24 18:38 - 00000000 ____D C:\ProgramData\HP
2013-06-05 02:46 - 2010-01-20 11:40 - 00000000 ___HD C:\ProgramData\Flood Light Games
2013-06-05 02:46 - 2009-12-30 20:46 - 00000000 ___HD C:\ProgramData\GhostFleet
2013-06-05 02:46 - 2008-11-22 20:12 - 00000000 ____D C:\ProgramData\iWin Games
2013-06-05 02:46 - 2008-06-24 20:34 - 00000000 ____D C:\ProgramData\HipSoft
2013-06-05 02:46 - 2008-06-06 19:31 - 00000000 ___HD C:\ProgramData\JollyBear
2013-06-05 02:46 - 2008-02-01 02:39 - 00000000 ____D C:\ProgramData\Lenovo
2013-06-05 02:45 - 2012-04-14 10:25 - 00000000 ___HD C:\ProgramData\DDNI
2013-06-05 02:45 - 2012-04-12 09:17 - 00000000 ____D C:\ProgramData\Driver Manager
2013-06-05 02:45 - 2011-09-21 15:24 - 00000000 ____D C:\ProgramData\Cateia Games
2013-06-05 02:45 - 2010-12-20 15:55 - 00000000 ____D C:\ProgramData\Big Fish Games
2013-06-05 02:45 - 2009-04-01 14:35 - 00000000 ___HD C:\ProgramData\Black Blob Studios
2013-06-05 02:45 - 2008-06-14 12:56 - 00000000 ___HD C:\ProgramData\cerasus.media
2013-06-05 02:44 - 2013-04-18 20:52 - 00000000 ____D C:\ProgramData\Apple Computer
2013-06-05 02:44 - 2011-06-17 21:04 - 00000000 ___HD C:\ProgramData\Aatrix Software
2013-06-05 02:44 - 2009-01-17 18:44 - 00000000 ___HD C:\ProgramData\Awem
2013-06-05 02:44 - 2008-12-28 10:47 - 00000000 ___HD C:\ProgramData\Alawar Stargaze
2013-06-05 02:44 - 2008-09-13 12:31 - 00000000 ____D C:\ProgramData\Apple
2013-06-05 02:44 - 2008-02-01 02:36 - 00000000 ____D C:\ProgramData\Adobe
2013-06-05 02:43 - 2012-12-29 16:47 - 00000000 ____D C:\Program Files\ValuSoft
2013-06-05 02:43 - 2012-02-09 16:08 - 00000000 ____D C:\Program Files\VS Revo Group
2013-06-05 02:43 - 2008-02-01 02:35 - 00000000 ____D C:\Program Files\ThinkVantage
2013-06-05 02:43 - 2006-11-02 04:18 - 00000000 ____D C:\Program Files\Windows NT
2013-06-05 02:42 - 2012-04-13 09:09 - 00000000 ____D C:\Program Files\Seagate
2013-06-05 02:42 - 2008-12-20 16:28 - 00000000 ____D C:\Program Files\SanDisk
2013-06-05 02:42 - 2008-02-01 02:20 - 00000000 ____D C:\Program Files\Synaptics
2013-06-05 02:42 - 2008-02-01 02:16 - 00000000 ____D C:\Program Files\ThinkPad
2013-06-05 02:41 - 2008-12-20 12:38 - 00000000 ____D C:\Program Files\Real
2013-06-05 02:41 - 2006-11-02 05:37 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-06-05 02:40 - 2011-06-17 20:28 - 00000000 ____D C:\Program Files\Pervasive Software
2013-06-05 02:40 - 2009-06-22 18:18 - 00000000 ____D C:\Program Files\NCH Software
2013-06-05 02:40 - 2008-02-01 03:26 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-06-05 02:40 - 2008-02-01 03:24 - 00000000 ____D C:\Program Files\Microsoft.NET
2013-06-05 02:40 - 2008-02-01 03:24 - 00000000 ____D C:\Program Files\Microsoft Visual Studio
2013-06-05 02:40 - 2006-11-02 05:37 - 00000000 ____D C:\Program Files\MSBuild
2013-06-05 02:39 - 2008-02-01 03:28 - 00000000 ____D C:\Program Files\Microsoft Small Business
2013-06-05 02:39 - 2008-02-01 03:22 - 00000000 ____D C:\Program Files\Microsoft Office
2013-06-05 02:37 - 2006-11-02 05:37 - 00000000 ____D C:\Program Files\Microsoft Games
2013-06-05 02:36 - 2008-02-01 02:32 - 00000000 ____D C:\Program Files\Lenovo Group Limited
2013-06-05 02:32 - 2010-06-24 18:47 - 00000000 ____D C:\Program Files\HP
2013-06-05 02:32 - 2008-02-01 03:14 - 00000000 ____D C:\Program Files\Intel
2013-06-05 02:32 - 2008-02-01 03:01 - 00000000 ____D C:\Program Files\Google
2013-06-05 02:31 - 2012-07-13 22:55 - 00000000 ____D C:\Program Files\ESET
2013-06-05 02:29 - 2012-04-14 10:25 - 00000000 ____D C:\Program Files\DDNI
2013-06-05 02:29 - 2008-02-01 02:14 - 00000000 ____D C:\Program Files\DIFX
2013-06-05 02:28 - 2008-02-01 03:15 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-06-05 02:28 - 2008-02-01 02:42 - 00000000 ____D C:\Program Files\Common Files\Roxio Shared
2013-06-05 02:28 - 2008-02-01 02:18 - 00000000 ____D C:\Program Files\CONEXANT
2013-06-05 02:28 - 2006-11-02 04:18 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2013-06-05 02:27 - 2008-12-20 12:50 - 00000000 ____D C:\Program Files\Common Files\Real
2013-06-05 02:27 - 2006-11-02 04:18 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-06-05 02:25 - 2010-05-19 17:21 - 00000000 ____D C:\Program Files\Common Files\Canon
2013-06-05 02:25 - 2008-09-13 12:31 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-06-05 02:25 - 2008-02-01 02:46 - 00000000 ____D C:\Program Files\Common Files\Java
2013-06-05 02:25 - 2008-02-01 02:44 - 00000000 ____D C:\Program Files\Common Files\InterVideo
2013-06-05 02:24 - 2008-02-01 02:36 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-06-05 02:22 - 2012-12-02 18:00 - 00000000 ____D C:\Program Files\BadgerIT
2013-06-05 02:22 - 2008-02-01 02:26 - 00000000 ____D C:\Program Files\Analog Devices
2013-06-05 02:21 - 2008-02-01 02:36 - 00000000 ____D C:\Program Files\Adobe
2013-06-05 02:17 - 2012-08-18 16:32 - 00000000 ____D C:\BigFishGamesCache
2013-06-05 02:17 - 2008-02-08 17:04 - 00000000 ____D C:\EPSON
2013-06-05 02:17 - 2008-02-01 02:27 - 00000000 ____D C:\Intel
2013-06-05 01:03 - 2013-05-24 20:20 - 00000000 ____D C:\Users\Janette\Documents\Tacoma film Festival
2013-06-05 01:03 - 2013-05-24 20:20 - 00000000 ____D C:\Users\Janette\Documents\Cartoons
2013-06-04 21:02 - 2006-11-02 03:22 - 61865984 ____A C:\Windows\System32\config\software_previous
2013-06-04 21:02 - 2006-11-02 03:22 - 24641536 ____A C:\Windows\System32\config\system_previous
2013-06-04 21:02 - 2006-11-02 03:22 - 00061440 ____A C:\Windows\System32\config\sam_previous
2013-06-04 21:02 - 2006-11-02 03:22 - 00028672 ____A C:\Windows\System32\config\security_previous
2013-06-04 20:58 - 2008-02-01 01:57 - 01356986 ____A C:\Windows\WindowsUpdate.log
2013-06-04 19:51 - 2013-06-04 19:51 - 00000000 ____D C:\Users\Janette\Documents\mbar-1.06.0.1003
2013-06-04 19:41 - 2013-06-04 18:19 - 00000000 ____D C:\Users\Janette\Desktop\RK_Quarantine
2013-06-04 18:42 - 2013-06-04 18:42 - 02708759 ____A C:\Users\Janette\Desktop\debug.log
2013-06-04 08:57 - 2013-05-31 19:20 - 00109056 ____A C:\Users\Janette\Documents\8.5x11 blank template.pub
2013-06-04 08:05 - 2013-06-04 08:04 - 00017139 ____A C:\Users\Janette\Desktop\dds.txt
2013-06-04 08:05 - 2013-06-04 08:04 - 00013829 ____A C:\Users\Janette\Desktop\attach.txt
2013-06-03 19:53 - 2006-11-02 03:22 - 01048576 ____A C:\Windows\System32\config\default_previous
2013-06-03 19:52 - 2006-11-02 03:22 - 45613056 ____A C:\Windows\System32\config\components_previous
2013-06-03 15:27 - 2013-06-03 15:27 - 00000000 ____D C:\ProgramData\AVAST Software
2013-06-03 15:27 - 2013-06-03 15:27 - 00000000 ____D C:\Program Files\AVAST Software
2013-06-02 15:16 - 2010-06-24 18:40 - 00005191 ____A C:\ProgramData\hpzinstall.log
2013-05-30 20:07 - 2012-02-10 18:38 - 00000091 ____A C:\Windows\win.ini
2013-05-25 21:33 - 2012-07-14 14:00 - 00154704 ____A C:\Windows\System32\GDIPFONTCACHEV1.DAT
2013-05-17 08:49 - 2012-11-23 15:36 - 00002555 ____N C:\Users\Janette\Desktop\Microsoft Office Publisher 2007.lnk
2013-05-15 03:35 - 2006-11-02 06:01 - 00032612 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-05-15 03:04 - 2006-11-02 03:24 - 72607752 ____N (Microsoft Corporation) C:\Windows\System32\mrt.exe
2013-05-14 19:19 - 2013-02-20 11:24 - 00000000 ____D C:\Users\Janette\Documents\Light Space Time contests
2013-05-14 19:17 - 2012-09-04 19:30 - 00692104 ____N (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-05-14 19:17 - 2012-09-04 19:30 - 00071048 ____N (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-05-14 17:57 - 2013-05-14 16:37 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-05-13 09:24 - 2013-05-13 09:24 - 03097600 ____N C:\Users\Janette\Documents\Out of the stall frame comp.pub
2013-05-11 14:42 - 2013-05-11 14:42 - 00235080 ____N (Big Fish Games) C:\Users\Janette\Downloads\bigfishgames_p30278468_s1_l1(6).exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-06-09 21:40
==================== End Of Log ============================
I still need Addition.txt
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 09-06-2013
Ran by Janette at 2013-06-09 22:38:56 Run:
Running from C:\Users\Janette\Downloads
Boot Mode: Safe Mode (with Networking)
==========================================================
==================== Installed Programs =======================
Update for Microsoft Office 2007 (KB2508958)
2007 Microsoft Office system (Version: 12.0.4518.1014)
32 Bit HP CIO Components Installer (Version: 7.1.8)
6000E609_eDocs (Version: 1.00.0000)
6000E609_Help (Version: 1.00.0000)
6000E609n (Version: 50.0.165.000)
ABBYY FineReader 6.0 Sprint (Version: 6.00.1395.4512)
Access Help (Version: 2.02)
Activation Assistant for the 2007 Microsoft Office suites
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)
Adobe AIR (Version: 2.7.1.19610)
Adobe Community Help (Version: 3.4.980)
Adobe Download Assistant (Version: 1.0.6)
Adobe Flash Player 11 Plugin (Version: 11.7.700.202)
Adobe Flash Player 9 ActiveX (Version: 9.0.16.0)
Adobe Help Center 2.0 (Version: 2.0.0)
Adobe Photoshop Elements 4.0 (Version: 4.0)
Adobe Reader X (10.1.7) (Version: 10.1.7)
Amazon MP3 Downloader 1.0.17 (Version: 1.0.17)
Apple Application Support (Version: 2.3)
Apple Mobile Device Support (Version: 2.1.0.25)
Apple Software Update (Version: 2.1.3.127)
Ask Toolbar (Version: 1.15.4.0)
Big Fish Games: Game Manager (Version: 3.0.1.60)
Bonjour (Version: 1.0.106)
BPDSoftware (Version: 50.0.165.000)
BPDSoftware_Ini (Version: 1.00.0000)
BufferChm (Version: 120.0.194.000)
Business Contact Manager for Outlook 2007 SP2 (Version: 3.0.8619.1)
CDBurnerXP (Version: 4.2.2.984)
Client Security Solution (Version: 8.0.0311.00)
ConvertHelper 2.2
Crystal Reports 2008 Runtime SP1 (Version: 12.1.0.882)
DeviceDiscovery (Version: 120.0.194.000)
DIBS (Version: 1.0.0)
Diskeeper Home (Version: 9.0.545)
Drag-to-Disc (Version: 9.05)
EPSON Attach To Email (Version: 1.01.0000)
EPSON Copy Utility 3 (Version: 3.3.0.0)
EPSON Event Manager (Version: 1.80.00)
EPSON Perfection V500 Photo Scanner Driver Update
EPSON Perfection V500P User's Guide
EPSON Printer Software
EPSON Scan
EPSON Scan Assistant (Version: 1.11.00)
FastStone Image Viewer 4.2 (Version: 4.2)
FinePix Studio
FinePixViewer Resource (Version: 1.2)
FinePixViewer Ver.5.5 (Version: 5.5)
GPBaseService2 (Version: 130.0.371.000)
Help Center (Version: 2.00c)
HP Customer Participation Program 12.0 (Version: 12.0)
HP Imaging Device Functions 12.0 (Version: 12.0)
HP Officejet 6000 E609 Series (Version: 12.0)
HP Smart Web Printing 4.60 (Version: 4.60)
HP Solution Center 13.0 (Version: 13.0)
HP Update (Version: 5.003.001.001)
HPDiagnosticAlert (Version: 1.00.0000)
HPProductAssistant (Version: 130.0.371.000)
Ink Monitor
Integrated Camera (Version: 5.8.8.012)
Intel(R) Graphics Media Accelerator Driver
Intel(R) PRO Network Connections Drivers
Intel® Turbo Memory and Intel® Matrix Storage Manager
InterVideo Register Manager (Version: 1.0.4.0)
InterVideo WinDVD (Version: 5.0-B11.1167)
Java Auto Updater (Version: 2.0.7.1)
Java(TM) 6 Update 33 (Version: 6.0.330)
Lenovo Auto Scroll Utility (Version: 1.11)
Lenovo Care (Version: 2.11)
Lenovo Care Supplement (Version: 2.01)
Lenovo News-Shop (Version: 2.0.3.0)
Lenovo Patch Utility (Version: 1.3.0.9)
Lenovo Registration
Lenovo System Interface Driver (Version: 1.05)
Malwarebytes Anti-Malware version 1.70.0.1100 (Version: 1.70.0.1100)
Mandala Painter 3.0 Professional
MarketResearch (Version: 120.0.226.000)
McAfee Online Backup
McAfee Online Backup (Version: 1.16.4.0)
Message Center (Version: 2.01b)
Message Center Plus (Version: 2.0.0012.00)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2698023)
Microsoft .NET Framework 1.1 Security Update (KB2742597)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Professional Hybrid 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Small Business Connectivity Components (Version: 2.0.7024.0)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Express Edition (MSSMLBIZ) (Version: 9.4.5000.00)
Microsoft SQL Server Native Client (Version: 9.00.5000.00)
Microsoft SQL Server Setup Support Files (English) (Version: 9.00.5000.00)
Microsoft SQL Server VSS Writer (Version: 9.00.5000.00)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (Version: 8.0.50727.4053)
Microsoft_VC90_ATL_x86 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86 (Version: 1.00.0000)
Mozilla Firefox 21.0 (x86 en-US) (Version: 21.0)
Mozilla Thunderbird 17.0.6 (x86 en-US) (Version: 17.0.6)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Multimedia Center For Think Offerings (Version: 9.0.629)
Network (Version: 120.0.194.000)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0)
On Screen Display (Version: 6.60.03)
OpenOffice.org Installer 1.0 (Version: 1.0.9221)
Peachtree Accounting 2010 (Version: 17.00.00)
PeachTree Signature Ready Forms (Version: 6.7.4)
Pervasive PSQL v10.10 Workgroup (32-bit) (Version: 10.10.126)
Pervasive PSQL v10.10 Workgroup (32-bit) (Version: 10.12.025)
Power Manager (Version: 6.32)
Presentation Director (Version: 4.08)
ProductContext (Version: 50.0.165.000)
Productivity Center Supplement for ThinkPad (Version: 2.00)
QuickTime (Version: 7.73.80.64)
Registry patch for Windows Vista USB S3 PM Enablement (Version: 1.00)
Registry patch of Changing Timing of IDLE IRP by Finger Print Driver for Windows Vista (Version: 1.01)
Registry Patch of Enabling Device Initiated Power Management(DIPM) on SATA for Windows Vista (Version: 1.01)
Registry patch to improve USB device detection on resume from sleep for Windows Vista (Version: 1.01.0000)
Rescue and Recovery (Version: 4.00.0117.00)
Rhapsody Player Engine (Version: 1.0.604)
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.52.02 (Version: 3.52.02)
Roads of Rome III
Sage Message Center (Version: 2.00.0000)
Seagate Replica v3.0.768.5345
Shared C Run-time for x86 (Version: 10.0.0)
Smart Audio Converter (Version: 3.3)
SmartWebPrinting (Version: 140.0.186.000)
SolutionCenter (Version: 130.0.373.000)
Sonic Icons for Lenovo (Version: 1.0.2)
SoundMAX (Version: 6.10.1.5500)
Status (Version: 120.0.194.000)
Switch Sound File Converter
swMSM (Version: 12.0.0.1)
System Migration Assistant (Version: 5.20.0033)
System Requirements Lab
System Update (Version: 3.15.0017)
ThinkPad EasyEject Utility (Version: 2.39)
ThinkPad FullScreen Magnifier (Version: 2.40)
ThinkPad Keyboard Customizer Utility (Version: 1.0.01)
ThinkPad Mobility Center Customization (Version: 1.20.0000)
ThinkPad Modem (Version: 7.62.00)
ThinkPad Power Management Driver (Version: 1.43)
ThinkPad UltraNav Driver (Version: 15.0.18.0)
ThinkPad UltraNav Utility (Version: 2.13.0)
Thinkpad Wireless LAN Adapters Software (11a/b/g/n) (Version: 7.3.1.127)
ThinkVantage Access Connections (Version: 4.42)
ThinkVantage Active Protection System (Version: 1.54)
ThinkVantage Productivity Center (Version: 2.10)
ThinkVantage Technologies Welcome Message (Version: 1.18)
Toolbox (Version: 120.0.194.000)
TrayApp (Version: 120.0.194.000)
Uniblue DriverScanner 2009
Uniblue DriverScanner 2009 (Version: 2.0.0.1)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817359) 32-Bit Edition
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
VOB2MPG v3 (Version: 3.2.2000)
Wallpapers
WebReg (Version: 120.0.194.000)
Windows Driver Package - Intel (e1express) Net (04/26/2007 9.7.240.0) (Version: 04/26/2007 9.7.240.0)
Windows Driver Package - Intel (iaStor) hdc (02/12/2007 7.0.0.1020) (Version: 02/12/2007 7.0.0.1020)
Windows Driver Package - Intel hdc (11/15/2006 8.2.0.1011) (Version: 11/15/2006 8.2.0.1011)
Windows Driver Package - Intel hdc (12/06/2006 6.8.0.3002) (Version: 12/06/2006 6.8.0.3002)
Windows Driver Package - Intel System (09/15/2006 7.0.0.1011) (Version: 09/15/2006 7.0.0.1011)
Windows Driver Package - Intel System (09/15/2006 8.0.0.1008) (Version: 09/15/2006 8.0.0.1008)
Windows Driver Package - Intel System (09/15/2006 8.0.0.1010) (Version: 09/15/2006 8.0.0.1010)
Windows Driver Package - Intel System (09/15/2006 8.2.0.1000) (Version: 09/15/2006 8.2.0.1000)
Windows Driver Package - Intel USB (09/15/2006 8.0.0.1008) (Version: 09/15/2006 8.0.0.1008)
Windows Driver Package - Lenovo (IBMPMDRV) System (05/31/2007 1.43) (Version: 05/31/2007 1.43)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
Worldjongg (Version: 1.00.000)
Yahoo! SiteBuilder (Version: 2.4.0)
==================== Restore Points =========================
==================== Faulty Device Manager Devices =============
Name: isatap.{CD82E2A3-614C-43A1-8DFA-9601575D6D8B}
Description: Microsoft ISATAP Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: isatap.Belkin
Description: Microsoft ISATAP Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Tun Miniport Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunmp
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Tun Miniport Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunmp
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Officejet 6000 E609n
Description: Officejet 6000 E609n
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: COM4
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/09/2013 09:48:41 PM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c
Error: (06/09/2013 09:25:14 PM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c
Error: (06/05/2013 00:11:28 PM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c
Error: (06/05/2013 11:58:40 AM) (Source: System Restore) (User: )
Description: Failed to create restore point on volume (Process = C:\Windows\system32\wbem\wmiprvse.exe; Descripton = ComboFix created restore point; Hr = 0x8007043c).
Error: (06/05/2013 11:58:40 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007043c.
Operation:
Instantiating VSS server
Error: (06/05/2013 11:58:40 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: The COM Server with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and name Coordinator cannot be started during Safe Mode.
The Volume Shadow Copy service cannot start while in safe mode. [0x8007043c]
Operation:
Instantiating VSS server
Error: (06/05/2013 10:29:37 AM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c
Error: (06/05/2013 10:14:36 AM) (Source: AVLogEvent) (User: NT AUTHORITY)
Description: a7f42014
Error: (06/05/2013 09:14:21 AM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c
Error: (06/05/2013 05:46:55 AM) (Source: AVLogEvent) (User: NT AUTHORITY)
Description: a7f42014
System errors:
=============
Microsoft Office Sessions:
=========================
Error: (05/30/2013 08:07:57 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 8, Application Name: Microsoft Office Publisher, Application Version: 12.0.6676.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 174 seconds with 0 seconds of active time. This session ended with a crash.
Error: (05/28/2013 04:27:01 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 8, Application Name: Microsoft Office Publisher, Application Version: 12.0.6676.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 65 seconds with 60 seconds of active time. This session ended with a crash.
Error: (05/28/2013 04:24:14 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 8, Application Name: Microsoft Office Publisher, Application Version: 12.0.6676.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 19430 seconds with 5280 seconds of active time. This session ended with a crash.
Error: (05/26/2013 08:11:10 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 8, Application Name: Microsoft Office Publisher, Application Version: 12.0.6676.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 10 seconds with 0 seconds of active time. This session ended with a crash.
Error: (05/25/2013 09:20:26 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 8, Application Name: Microsoft Office Publisher, Application Version: 12.0.6676.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 455 seconds with 120 seconds of active time. This session ended with a crash.
Error: (05/25/2013 09:12:20 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 51 seconds with 0 seconds of active time. This session ended with a crash.
Error: (05/25/2013 09:11:15 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 8, Application Name: Microsoft Office Publisher, Application Version: 12.0.6676.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 58 seconds with 0 seconds of active time. This session ended with a crash.
Error: (05/25/2013 09:10:09 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 8, Application Name: Microsoft Office Publisher, Application Version: 12.0.6676.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 149 seconds with 120 seconds of active time. This session ended with a crash.
Error: (05/25/2013 09:03:38 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 57 seconds with 0 seconds of active time. This session ended with a crash.
Error: (05/25/2013 09:02:23 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 23 seconds with 0 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2013-06-03 14:04:23.178
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Common Files\McAfee\VSCore\VSCore\mfeelamk.sys because the set of per-page image hashes could not be found on the system.
Date: 2013-06-03 14:04:22.975
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Common Files\McAfee\VSCore\VSCore\mfeelamk.sys because the set of per-page image hashes could not be found on the system.
Date: 2013-06-03 14:04:22.757
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Common Files\McAfee\VSCore\VSCore\mfeelamk.sys because the set of per-page image hashes could not be found on the system.
Date: 2013-06-03 14:04:22.554
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Common Files\McAfee\VSCore\VSCore\mfeelamk.sys because the set of per-page image hashes could not be found on the system.
Date: 2013-06-03 14:04:22.351
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Common Files\McAfee\VSCore\VSCore\mfeelamk.sys because the set of per-page image hashes could not be found on the system.
Date: 2013-06-03 14:04:22.117
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Common Files\McAfee\VSCore\VSCore\mfeelamk.sys because the set of per-page image hashes could not be found on the system.
Date: 2013-02-21 14:12:40.411
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\igdumdx32.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-02-21 14:12:40.145
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\igdumdx32.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-02-21 14:12:39.889
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\PROGRA~1\McAfee\SITEAD~1\sahook.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-02-21 14:12:39.881
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\PROGRA~1\McAfee\SITEAD~1\sahook.dll because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Percentage of memory in use: 28%
Total physical RAM: 3061.34 MB
Available physical RAM: 2192.77 MB
Total Pagefile: 6337.7 MB
Available Pagefile: 5589.95 MB
Total Virtual: 2047.88 MB
Available Virtual: 1941.5 MB
==================== Drives ================================
Drive c: (SW_Preload) (Fixed) (Total:226.12 GB) (Free:120.87 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 233 GB) (Disk ID: 2FFA1D60)
Partition 1: (Not Active) - (Size=7 GB) - (Type=27)
Partition 2: (Active) - (Size=226 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 514 MB) (Disk ID: D49470DA)
Partition 1: (Not Active) - (Size=513 MB) - (Type=0B)
==================== End Of Log ============================
Download attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Run FRST/FRST64 and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.
See if you can boot normally.
Having a problem with this. Downloaded the attached fixlist.txt and saved it to the desktop. Ran FRST and pushed Fix and waited. It closed and there is no Fixlog.txt on the desktop. Ran again and pushed Fix, it did the same thing. Just closed and that was it. Do you think it could do this because FRST is a shortcut on the desktop? I didn't save it there to begin with--I created a shortcut from the download file to the desktop.
That must have been the problem because I downloaded FRST directly to the desktop and voila it worked. The computer restarted afterwards in normal mode and the same blank screen came up. Had to go back into Safe Mode
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 11-06-2013
Ran by Janette at 2013-06-10 19:54:34 Run:1
Running from C:\Users\Janette\Desktop
Boot Mode: Safe Mode (with Networking)
==============================================
[4056] C:\Program Files\McAfee\MAT\McPvTray.exe => Process closed successfully.
C:\Program Files\McAfee => Moved successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\GrpConv => Value deleted successfully.
0164701370839192mcinstcleanup => Service deleted successfully.
MOBCleanup => Service deleted successfully.
mfefire => Service deleted successfully.
mfevtp => Service deleted successfully.
MOBKbackup => Service deleted successfully.
mferkdk => Service deleted successfully.
mfesmfk => Service deleted successfully.
blbdrive => Service deleted successfully.
catchme => Service deleted successfully.
cfwids => Service deleted successfully.
IpInIp => Service deleted successfully.
MCSTRM => Service deleted successfully.
mfeapfk => Service deleted successfully.
mfeavfk => Service deleted successfully.
mfebopk => Service deleted successfully.
mfefirek => Service deleted successfully.
mfehidk => Service deleted successfully.
mfewfpk => Service deleted successfully.
NwlnkFlt => Service deleted successfully.
NwlnkFwd => Service deleted successfully.
UIUSys => Service deleted successfully.
C:\Windows\Tasks\McAfee Cleanup.job => Moved successfully.
C:\Users\Janette\Downloads\MCPR.exe => Moved successfully.
C:\Windows\Tasks\McAfee Cleanup.job => File/Directory not found.
"C:\Program Files\McAfee Online Backup" directory move:
C:\Program Files\McAfee Online Backup\MOBKshell.dll => Moved successfully.
C:\Program Files\McAfee Online Backup\oem.dll => Moved successfully.
Could not move C:\Program Files\McAfee Online Backup\Data\manifest.dat. => Scheduled to move on reboot.
Could not move C:\Program Files\McAfee Online Backup\Data\MOBK.log. => Scheduled to move on reboot.
Could not move "C:\Program Files\McAfee Online Backup" directory. => Scheduled to move on reboot.
C:\Program Files\McAfee => File/Directory not found.
C:\Program Files\Common Files\McAfee => Moved successfully.
C:\Users\Janette\Downloads\MCPR.exe => File/Directory not found.
C:\Users\Janette\AppData\Roaming\McAfee => Moved successfully.
This is what my instructions said.Quote:
I downloaded FRST directly to the desktop
In any case let's try something else...
For x32 (x86) bit systems download Farbar Recovery Scan Tool 32-Bit and save it to a flash drive.
For x64 bit systems download Farbar Recovery Scan Tool 64-Bit and save it to a flash drive.
Plug the flashdrive into the infected PC.
If you are using Windows 8 consult How to use the Windows 8 System Recovery Environment Command Prompt to enter System Recovery Command prompt.
If you are using Vista or Windows 7 enter System Recovery Options.
To enter System Recovery Options from the Advanced Boot Options:
- Restart the computer.
- As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
- Use the arrow keys to select the Repair your computer menu item.
- Select US as the keyboard language settings, and then click Next.
- Select the operating system you want to repair, and then click Next.
- Select your user account an click Next.
To enter System Recovery Options by using Windows installation disc:
- Insert the installation disc.
- Restart your computer.
- If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
- Click Repair your computer.
- Select US as the keyboard language settings, and then click Next.
- Select the operating system you want to repair, and then click Next.
- Select your user account and click Next.
On the System Recovery Options menu you will get the following options:
- Startup Repair
- System Restore
- Windows Complete PC Restore
- Windows Memory Diagnostic Tool
- Command Prompt
- Select Command Prompt
- In the command window type in notepad and press Enter.
- The notepad opens. Under File menu select Open.
- Select "Computer" and find your flash drive letter and close the notepad.
- In the command window type e:\frst (for x64 bit version type e:\frst64) and press Enter
Note: Replace letter e with the drive letter of your flash drive.- The tool will start to run.
- When the tool opens click Yes to disclaimer.
- Press Scan button.
- It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.
=========== Result of Scheduled Files to move ===========
C:\Program Files\McAfee Online Backup\Data\manifest.dat => Moved successfully.
C:\Program Files\McAfee Online Backup\Data\MOBK.log => Moved successfully.
C:\Program Files\McAfee Online Backup => Moved successfully.
==== End of Fixlog ====
Things are getting better. The laptop is running lots faster than yesterday and the day before. I restarted in normal mode this morning and my screen-saver picture is back along with the bottom tray, although there are minimal icons in the tray. But the cursor spun for 10 minutes and there were no icons on the desktop. So I restarted in safe-mode to post this.
That's better news...
Restart in normal mode, go Start and in "Start search" type:
explorer.exe
Press Enter.
Will it bring your desktop icons back?
Nope. Start is not there. A Windows logo is where Start should be. If I move the cursor over it the cursor arrow becomes a spinning circle. Also, the picture I had up for a screen-saver is gone again.