Sucked into bad website

F

fmonte

Member
I just upgraded my computer with a new hard drive and an upgrade in software from xp to 7 professional. My computer was running amazing but my microsoft keyboards features would not work. I went to their website and discover my keyboard is not compatible with win 7.

I did a google search and found a website that professed they could make my keyboard work with 7. As soon as I clicked on the site my Avast popped up with a warning so I thought it was blocked. Now I can not get on the internet without getting a pop up message saying; attn. Verizon internet customer. Call a toll free number for an immediate scan.

I am trying to get on the internet to download the software to do your 4 step process of malware removal and website redirect. Please help. Thank you.
 
If you have one download those programs from another computer and transfer to flash drive and run that way. You can also try booting to safe mode with networking.
 
Thanks John: Here are the logs you requested one at a time.

1. Adwcleaner

# AdwCleaner v4.205 - Logfile created 25/05/2015 at 12:11:53
# Updated 21/05/2015 by Xplode
# Database : 2015-05-25.1 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Frank - FRANK-PC
# Running from : C:\Users\Frank\Downloads\adwcleaner_4.205.exe
# Option : Cleaning

***** [ Services ] *****

[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\HQCinema Pro 2.1V23.05
Folder Deleted : C:\Users\Frank\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\md0yaxo0.default\Extensions\[email protected]
Folder Deleted : C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\oikdphhbmkgffaopgmlfifpaobijngif
File Deleted : C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_oikdphhbmkgffaopgmlfifpaobijngif_0.localstorage
File Deleted : C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_oikdphhbmkgffaopgmlfifpaobijngif_0.localstorage-journal
File Deleted : C:\Users\Frank\AppData\Roaming\0WZ8DMCvHIY01uJbM5KR3Ow
File Deleted : C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_inst.shoppingate.info_0.localstorage
File Deleted : C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_inst.shoppingate.info_0.localstorage-journal
File Deleted : C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.selectgo00.selectgo.net_0.localstorage
File Deleted : C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.selectgo00.selectgo.net_0.localstorage-journal

***** [ Scheduled tasks ] *****

Task Deleted : globalUpdateUpdateTaskMachineCore
Task Deleted : globalUpdateUpdateTaskMachineUA
Task Deleted : 0WZ8DMCvHIY01uJbM5KR3Ow
Task Deleted : 775a33ba-75bf-4f41-8c31-2330e6d31d25-1-6
Task Deleted : 775a33ba-75bf-4f41-8c31-2330e6d31d25-1-7
Task Deleted : 775a33ba-75bf-4f41-8c31-2330e6d31d25-10_user
Task Deleted : 775a33ba-75bf-4f41-8c31-2330e6d31d25-3
Task Deleted : 775a33ba-75bf-4f41-8c31-2330e6d31d25-4
Task Deleted : 775a33ba-75bf-4f41-8c31-2330e6d31d25-5
Task Deleted : 775a33ba-75bf-4f41-8c31-2330e6d31d25-5_user
Task Deleted : 775a33ba-75bf-4f41-8c31-2330e6d31d25-6
Task Deleted : 775a33ba-75bf-4f41-8c31-2330e6d31d25-7

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKLM\SOFTWARE\Classes\AppID\globalupdate.exe
Key Deleted : HKLM\SOFTWARE\bd43c42d-15eb-41b5-8bde-bb8eabe16af0
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\YorkNewCin
Key Deleted : HKCU\Software\HighDefAction
Key Deleted : HKCU\Software\ArenaHD
Key Deleted : HKCU\Software\HQCinema Pro 2.1V23.05-nv
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\YorkNewCin
Key Deleted : HKLM\SOFTWARE\HighDefAction
Key Deleted : HKLM\SOFTWARE\ArenaHD
Key Deleted : HKLM\SOFTWARE\HQCinema Pro 2.1V23.05
Key Deleted : HKLM\SOFTWARE\HQCinema Pro 2.1V23.05-nv
Key Deleted : HKU\.DEFAULT\Software\HQCinema Pro 2.1V23.05-nv
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer
Key Deleted : [x64] HKLM\SOFTWARE\YorkNewCin
Key Deleted : [x64] HKLM\SOFTWARE\HighDefAction
Key Deleted : [x64] HKLM\SOFTWARE\ArenaHD
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\globalupdate.exe
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\reimageplus.com

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17801


-\\ Mozilla Firefox v38.0.1 (x86 en-US)


-\\ Google Chrome v43.0.2357.65


*************************

AdwCleaner[R0].txt - [9387 bytes] - [25/05/2015 12:06:06]
AdwCleaner[S0].txt - [8721 bytes] - [25/05/2015 12:11:53]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8780 bytes] ##########
 
2. junkware log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.7.9 (05.24.2015:1)
OS: Windows 7 Professional x64
Ran by Frank on Mon 05/25/2015 at 12:21:15.44
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_FE949715D2D58129594DCE0D8D68073D



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Users\Frank\appdata\local\google\chrome\user data\default\local storage\http_static.boostsaves.com_0.localstorage
Successfully deleted: [File] C:\Users\Frank\appdata\local\google\chrome\user data\default\local storage\http_static.boostsaves.com_0.localstorage-journal
Successfully deleted: [File] C:\Users\Frank\appdata\local\google\chrome\user data\default\local storage\http_static.select-n-go00.select-n-go.com_0.localstorage
Successfully deleted: [File] C:\Users\Frank\appdata\local\google\chrome\user data\default\local storage\http_static.select-n-go00.select-n-go.com_0.localstorage-journal
Successfully deleted: [File] C:\Users\Frank\appdata\local\google\chrome\user data\default\local storage\https_static.boostsaves.com_0.localstorage
Successfully deleted: [File] C:\Users\Frank\appdata\local\google\chrome\user data\default\local storage\https_static.boostsaves.com_0.localstorage-journal



~~~ Folders



~~~ FireFox

Successfully deleted: [File] C:\Users\Frank\AppData\Roaming\mozilla\firefox\profiles\md0yaxo0.default\searchplugins\yahoo_ff.xml





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Mon 05/25/2015 at 12:24:11.15
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
3. malwarebytes log:

<?xml version="1.0" encoding="UTF-16" ?>
<mbam-log>
<header>
<date>2015/05/25 12:29:19 -0400</date>
<logfile>mbam-log-2015-05-25 (12-29-18).xml</logfile>
<isadmin>yes</isadmin>
</header>
<engine>
<version>2.01.6.1022</version>
<malware-database>v2015.05.25.05</malware-database>
<rootkit-database>v2015.05.24.01</rootkit-database>
<license>free</license>
<file-protection>disabled</file-protection>
<web-protection>disabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
<system>
<osversion>Windows 7 Service Pack 1</osversion>
<arch>x64</arch>
<username>Frank</username>
<filesys>NTFS</filesys>
</system>
<summary>
<type>threat</type>
<result>completed</result>
<objects>344520</objects>
<time>402</time>
<processes>0</processes>
<modules>0</modules>
<keys>6</keys>
<values>1</values>
<datas>0</datas>
<folders>11</folders>
<files>116</files>
<sectors>0</sectors>
</summary>
<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
<items>
<key><path>HKLM\SOFTWARE\WOW6432NODE\HQCinema Pro 2.1V23.05-nv-ie</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>9a3f1f78d0baa88ef5a05c9b699ad42c</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider</path><vendor>PUP.Optional.CrossRider.C</vendor><action>success</action><hash>f4e5c4d36723181e00b0627cb64d23dd</hash></key>
<key><path>HKU\S-1-5-18\SOFTWARE\HQCinema Pro 2.1V23.05-nv-ie</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>ba1fc0d7e1a98fa7177f619614ef58a8</hash></key>
<key><path>HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_</path><vendor>PUP.Optional.Crossrider.C</vendor><action>success</action><hash>ae2b3c5b92f815213710cca82dd831cf</hash></key>
<key><path>HKU\S-1-5-21-2079534182-2779057859-317640915-1000\SOFTWARE\HQCinema Pro 2.1V23.05-nv-ie</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>11c89cfbe0aaa591950111e6bc47f709</hash></key>
<key><path>HKU\S-1-5-21-2079534182-2779057859-317640915-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7AE59B79-93B3-4539-99A2-B50E2C71F20C}</path><vendor>PUP.Optional.Spigot.A</vendor><action>success</action><hash>11c8f3a4028826102a3f03dded16ed13</hash></key>
<value><path>HKU\S-1-5-21-2079534182-2779057859-317640915-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7AE59B79-93B3-4539-99A2-B50E2C71F20C}</path><valuename>URL</valuename><vendor>PUP.Optional.Spigot.A</vendor><action>success</action><valuedata>https://search.yahoo.com/search?fr=chr-greentree_ie&amp;ei=utf-8&amp;ilc=12&amp;type=926458&amp;p={searchTerms}</valuedata><hash>11c8f3a4028826102a3f03dded16ed13</hash></value>
<folder><path>C:\Users\Frank\AppData\Local\Temp\comh.401286</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>6a6ffe994e3ccc6aed825f603fc43ac6</hash></folder>
<folder><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></folder>
<folder><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\api</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></folder>
<folder><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></folder>
<folder><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\popupResource</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></folder>
<folder><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></folder>
<folder><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></folder>
<folder><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></folder>
<folder><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\userCode</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></folder>
<folder><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\icons</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></folder>
<folder><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\icons\actions</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></folder>
<file><path>C:\Program Files (x86)\AMD\5c2ddedf-4a26-456f-9354-2ee1d8eeba92.dll</path><vendor>PUP.Optional.Nova.A</vendor><action>success</action><hash>ac2d3e596e1c5dd93bd4ea29778beb15</hash></file>
<file><path>C:\Program Files (x86)\AMD\ddf0a677-4448-4dbc-9e46-351f2751f2b9.dll</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>02d7f3a4dab0e6507e20412481854db3</hash></file>
<file><path>C:\Program Files (x86)\ddf0a677-4448-4dbc-9e46-351f2751f2b9\9c462e1a-9714-47f6-84cf-b41f8b85084b.dll</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>b128c2d5dbafef47b4ea87de7d89867a</hash></file>
<file><path>C:\Program Files (x86)\ddf0a677-4448-4dbc-9e46-351f2751f2b9\a2735462-ec5c-4b4c-8126-393af1e41666.dll</path><vendor>PUP.Optional.Nova.A</vendor><action>success</action><hash>e0f93a5dd3b7af87a768a370d0326799</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\nsxD441.tmp\SM.dll</path><vendor>PUP.Optional.Spigot.SID</vendor><action>success</action><hash>0ccdd2c50783d75fc957cc99c83e7c84</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\{B7CD2C41-3C70-4803-9135-9C3CE2BA6FF4}\SMSetup.exe</path><vendor>PUP.Optional.Spigot.SID</vendor><action>success</action><hash>3c9df1a62b5f2016c55be77e6a9c728e</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\comh.401286\globalupdate.exe</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>10c95b3c5c2e82b4e7b6d872d42ecd33</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\comh.401286\globalupdateBroker.exe</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>b5241285c7c37fb78c1182c8da2843bd</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\comh.401286\globalupdateCrashHandler.exe</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>b5244e49602ac86e594492b813ef0ef2</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\comh.401286\globalupdateOnDemand.exe</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>09d081169af042f4c6d7f35718ea0ef2</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\comh.401286\goopdate.dll</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>8b4e3b5c2565a294623b6bdfa45e8a76</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\comh.401286\goopdateres_en.dll</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>84557e19c4c6ab8b099434165fa3936d</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\comh.401286\npglobalupdateUpdate4.dll</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>16c316815634de58e9b45eec5da5728e</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\comh.401286\psmachine.dll</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>09d04c4b305a5bdbb3eadf6bb44e2cd4</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\comh.401286\psuser.dll</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>8a4f3f58d0baeb4bb3ea2921b74bb848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\81432443200\1QFRAK1JUUA==0.exe</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>ce0b1f78632764d23dd0e07ed234e11f</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\81432443200\1QFRAK1JUUA==4.exe</path><vendor>PUP.Optional.Alerts.A</vendor><action>success</action><hash>efea8f086723ba7c977752efe41ea45c</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\81432443200\1QFRAK1JUUA==5.exe</path><vendor>PUP.Optional.Nosibay.A</vendor><action>success</action><hash>f9e08c0b3258f04641f7075e5caa2ad6</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\81432443200\1QFRAK1JUUA==7.exe</path><vendor>PUP.Optional.Boost.A</vendor><action>success</action><hash>1cbdedaabcce989eb9caadb8798df40c</hash></file>
<file><path>C:\Users\Frank\Downloads\JRT-40983534.exe</path><vendor>PUP.Optional.Proinstall</vendor><action>success</action><hash>cf0a9007b5d51c1ae6012626b64c1fe1</hash></file>
<file><path>C:\Users\Frank\Downloads\Microsoft Wireless Comfort Keyboard 4000 Driver Windows 7.exe</path><vendor>PUP.Optional.OutBrowse</vendor><action>success</action><hash>6d6ca9ee64260e28c802b2b32adce818</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fromdoctopdf.dl.myway.com_0.localstorage</path><vendor>PUP.Optional.MindSpark.A</vendor><action>success</action><hash>4c8d5b3cbdcd2f071109b8bdb154fd03</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fromdoctopdf.dl.myway.com_0.localstorage-journal</path><vendor>PUP.Optional.MindSpark.A</vendor><action>success</action><hash>30a9f0a7bad0a294d04aec8949bc867a</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Temp\comh.401286\globalupdateHelper.msi</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>6a6ffe994e3ccc6aed825f603fc43ac6</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\c31c6054a0ce78d577ad385e7433c9db.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\535295941e0ed86c9cc7a38502d521de.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\main.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\api\047d8291d176b5c4901e1ca4146c495d.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\api\2c65aa341b803c21c2e74914cc17708f.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\api\3bf36dcc49141f9c73aa41e7d876db17.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\api\f8bdc7de44a7b19b9eeea2384a54c621.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\api\fb83a66ca2b474077e4cdbe963e7d6ca.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\api\pageAction.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\69eb64ba28d7dd28881db1becd999a11.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\0af69e8a0ba9e95e5c2f1b0bef928ccd.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\2aba2df05058f75e4b189111b8a4b980.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\2fd2884674d0dd3751407a142a343aff.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\35a2e6c0f0807f061b4f37cc14586fe1.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\45313eb50767dc1632ee21964b4163c6.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\45d86a210682ac474c84ec20c69fae6c.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\45ff5b4104f9833966cb0eef458ca665.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\59448e52a545f431613d1d2eaf8762ed.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\6e812e8bf54037bf30b69626ead42d94.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\a24b194e780f70a091e90e15ff7f6689.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\app_api.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\bf175e7df2213c9b28fdc6a73e082ae8.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\ed7d5bc356f2301de1bba2a573f08a23.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\f66b151a770384bf46c5b328d86abbc4.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\installer.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\popupResource\newPopup.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\js\lib\popupResource\popup.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\background.html</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\chromeCoreFilesIndex.txt</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\manifest.json</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\popup.html</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\Settings.json</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\manifest.xml</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins.json</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\281.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\102.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\104.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\119.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\13.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\14.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\17.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\178.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\179.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\180.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\184.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\19.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\195.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\200.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\220.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\221.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\223.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\231.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\232.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\234.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\242.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\246.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\252.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\253.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\260.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\273.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\288.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\289.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\300.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\334.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\335.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\339.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\345.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\354.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\356.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\376.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\380.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\385.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\389.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\390.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\391.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\397.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\4.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\47.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\64.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\7.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\78.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\80.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\9.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\91.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\plugins\97.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\userCode\background.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\extensionData\userCode\extension.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\icons\icon128.png</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\icons\icon16.png</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\icons\icon48.png</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh\1.26.52_0\icons\actions\1.png</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>2faa385f2268bf7783bc0264d531b848</hash></file>
<file><path>C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\md0yaxo0.default\prefs.js</path><vendor>PUP.Optional.Spigot.A</vendor><action>replaced</action><baddata>user_pref(&quot;keyword.URL&quot;, &quot;https://search.yahoo.com/search?fr=greentree_ff1&amp;ei=utf-8&amp;ilc=12&amp;type=926458&amp;p=&quot;);</baddata><gooddata></gooddata><hash>edecd5c20783e551381e481f986e04fc</hash></file>
</items>
</mbam-log>
 
4. otl log part 1

OTL logfile created on: 5/25/2015 12:57:52 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Frank\Downloads
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17801)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.07 Gb Available Physical Memory | 51.87% Memory free
10.00 Gb Paging File | 8.29 Gb Available in Paging File | 82.90% Paging File free
Paging file location(s): c:\pagefile.sys 6142 6142 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 1862.67 Gb Total Space | 1723.55 Gb Free Space | 92.53% Space Free | Partition Type: NTFS
Drive I: | 1863.01 Gb Total Space | 1092.39 Gb Free Space | 58.64% Space Free | Partition Type: NTFS
Drive J: | 29.71 Gb Total Space | 25.71 Gb Free Space | 86.54% Space Free | Partition Type: FAT32

Computer Name: FRANK-PC | User Name: Frank | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Frank\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe (Siber Systems)
PRC - C:\Program Files\AVAST Software\Avast\avastui.exe (Avast Software s.r.o.)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Avast Software s.r.o.)
PRC - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Google\Chrome Remote Desktop\42.0.2311.39\remoting_host.exe (Google Inc.)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\MMTaskbar\MultiMon.exe ()
PRC - C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe (Nuance Communications, Inc.)
PRC - C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe (Nuance Communications, Inc.)
PRC - C:\Program Files (x86)\Nuance\PDF Viewer Plus\PdfPro7Hook.exe (Nuance Communications, Inc.)
PRC - C:\Program Files (x86)\Nuance\PDFCreate\PdfCreate7Hook.exe (Nuance Communications, Inc.)


========== Modules (No Company Name) ==========

MOD - C:\Program Files\AVAST Software\Avast\libcef.dll ()
MOD - C:\Program Files\AVAST Software\Avast\log.dll ()
MOD - C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll ()
MOD - C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll ()
MOD - C:\Program Files (x86)\MMTaskbar\MultiMon.exe ()


========== Services (SafeList) ==========

SRV:64bit: - (avast! Antivirus) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Avast Software s.r.o.)
SRV:64bit: - (GfExperienceService) -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (NVIDIA Corporation)
SRV:64bit: - (NvStreamSvc) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation)
SRV:64bit: - (IEEtwCollectorService) -- C:\Windows\SysNative\IEEtwCollector.exe (Microsoft Corporation)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (Samsung Network Fax Server) -- C:\Windows\SysNative\spool\drivers\x64\3\NetFaxServer64.exe (Samsung Electronics Co., Ltd.)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (NvNetworkService) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (chromoting) -- C:\Program Files (x86)\Google\Chrome Remote Desktop\42.0.2311.39\remoting_host.exe (Google Inc.)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (Samsung Network Fax Server) -- C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe (Samsung Electronics Co., Ltd.)
SRV - (PDFProFiltSrvPP) -- C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe (Nuance Communications, Inc.)


========== Driver Services (SafeList) ==========

DRV:64bit: - (aswSP) -- C:\Windows\SysNative\drivers\aswSP.sys (Avast Software s.r.o.)
DRV:64bit: - (aswVmm) -- C:\Windows\SysNative\drivers\aswVmm.sys ()
DRV:64bit: - (aswStm) -- C:\Windows\SysNative\drivers\aswStm.sys (Avast Software s.r.o.)
DRV:64bit: - (aswRdr) -- C:\Windows\SysNative\drivers\aswRdr2.sys (Avast Software s.r.o.)
DRV:64bit: - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (Avast Software s.r.o.)
DRV:64bit: - (aswRvrt) -- C:\Windows\SysNative\drivers\aswRvrt.sys ()
DRV:64bit: - (aswHwid) -- C:\Windows\SysNative\drivers\aswHwid.sys ()
DRV:64bit: - (aswSnx) -- C:\Windows\SysNative\drivers\aswSnx.sys (Avast Software s.r.o.)
DRV:64bit: - (NvStreamKms) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys (NVIDIA Corporation)
DRV:64bit: - (MBAMWebAccessControl) -- C:\Windows\SysNative\drivers\mwac.sys (Malwarebytes Corporation)
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (terminpt) -- C:\Windows\SysNative\drivers\terminpt.sys (Microsoft Corporation)
DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (nvvad_WaveExtensible) -- C:\Windows\SysNative\drivers\nvvad64v.sys (NVIDIA Corporation)
DRV:64bit: - (SSPORT) -- C:\Windows\SysNative\drivers\SSPORT.SYS (Samsung Electronics)
DRV:64bit: - (dc3d) -- C:\Windows\SysNative\drivers\dc3d.sys (Microsoft Corporation)
DRV:64bit: - (Point64) -- C:\Windows\SysNative\drivers\point64.sys (Microsoft Corporation)
DRV:64bit: - (NuidFltr) -- C:\Windows\SysNative\drivers\nuidfltr.sys (Microsoft Corporation)
DRV:64bit: - (dmvsc) -- C:\Windows\SysNative\drivers\dmvsc.sys (Microsoft Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (asmtxhci) -- C:\Windows\SysNative\drivers\asmtxhci.sys (ASMedia Technology Inc)
DRV:64bit: - (asmthub3) -- C:\Windows\SysNative\drivers\asmthub3.sys (ASMedia Technology Inc)
DRV:64bit: - (AtiPcie) -- C:\Windows\SysNative\drivers\AtiPcie.sys (Advanced Micro Devices Inc.)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (BS_I2cIo) -- C:\Windows\SysNative\drivers\BS_I2c64.sys (BIOSTAR Group)
DRV:64bit: - (BIOS) -- C:\Windows\SysNative\drivers\BIOS64.sys (BIOSTAR Group)
DRV:64bit: - (usbfilter) -- C:\Windows\SysNative\drivers\usbfilter.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (smserial) -- C:\Windows\SysNative\drivers\SmSerl64.sys (Motorola Inc.)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (BIOS) -- C:\Windows\SysWOW64\drivers\BIOS64.sys (BIOSTAR Group)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Old Start Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.countryCode: "US"
FF - prefs.js..browser.search.region: "US"
FF - prefs.js..browser.startup.homepage: "https://www.google.com/?gws_rd=ssl"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:38.0.1
FF - prefs.js..browser.search.defaultenginename: "Yahoo!"
FF - prefs.js..browser.search.selectedEngine: "Yahoo!"
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\ZEON/PDF,version=2.0: C:\Program Files (x86)\Nuance\PDF Viewer Plus\bin\nppdf.dll (Zeon Corporation)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{22119944-ED35-4ab1-910B-E619EA06A115}: C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox [2015/05/16 02:07:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 38.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 38.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2015/05/15 10:54:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Frank\AppData\Roaming\Mozilla\Extensions
[2015/05/25 12:11:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\md0yaxo0.default\extensions
[2015/05/15 10:53:54 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2015/05/15 10:53:54 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) -- C:\USERS\FRANK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MD0YAXO0.DEFAULT\EXTENSIONS\[email protected]

========== Chrome ==========

CHR - Extension: No name found = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
CHR - Extension: No name found = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
CHR - Extension: No name found = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\
CHR - Extension: No name found = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0\
CHR - Extension: No name found = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0\
CHR - Extension: No name found = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\deceagebecbceejblnlcjooeohmmeldh\1.0.0.4_0\
CHR - Extension: No name found = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
CHR - Extension: No name found = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp\42.0.2311.37_0\
CHR - Extension: No name found = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2015.506.11355_0\
CHR - Extension: No name found = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\
CHR - Extension: No name found = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\
CHR - Extension: No name found = C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\

O1 HOSTS File: ([2015/05/15 10:26:46 | 000,000,864 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 validation.sls.microsoft.com
O2 - BHO: (PlusIEEventHelper Class) - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\bin\PlusIEContextMenu.dll (Zeon Corporation)
O2 - BHO: (Reg Error: Value error.) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O2 - BHO: (ZeonIEEventHelper Class) - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - C:\Program Files (x86)\Nuance\PDFCreate\bin\ZeonIEFavClient.dll (Zeon Corporation)
O3 - HKLM\..\Toolbar: (&RoboForm) - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O3 - HKLM\..\Toolbar: (DocuCom PDF) - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Program Files (x86)\Nuance\PDFCreate\bin\ZeonIEFavClient.dll (Zeon Corporation)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o.)
O4 - HKLM..\Run: [BiosNotice] C:\Program Files (x86)\BIOSTAR\BiosNotice\BiosNotice.exe ()
O4 - HKLM..\Run: [IndexSearch] C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\isuspm.exe (Flexera Software, Inc.)
O4 - HKLM..\Run: [PaperPort PTD] C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PDF7 Registry Controller] C:\Program Files (x86)\Nuance\PDFCreate\RegistryController.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PDFCreHook] C:\Program Files (x86)\Nuance\PDFCreate\PdfCreate7Hook.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PDFProHook] C:\Program Files (x86)\Nuance\PDF Viewer Plus\PdfPro7Hook.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PPort14reminder] C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKCU..\Run: [RoboForm] C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe (Siber Systems)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
O9 - Extra 'Tools' menuitem : Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
O9 - Extra Button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
O9 - Extra 'Tools' menuitem : Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
O9 - Extra Button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
O9 - Extra 'Tools' menuitem : RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{07B10CF2-F241-4F9F-849C-EB1569533E72}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2015/05/25 12:28:13 | 000,136,408 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2015/05/25 12:27:34 | 000,107,736 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
[2015/05/25 12:27:34 | 000,063,704 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys
[2015/05/25 12:27:34 | 000,025,816 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2015/05/25 12:27:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware
[2015/05/25 12:27:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2015/05/25 12:26:52 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\Programs
[2015/05/25 12:21:17 | 000,000,000 | ---D | C] -- C:\RegBackup
[2015/05/25 12:06:01 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2015/05/25 11:45:29 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2015/05/25 11:45:28 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
[2015/05/25 09:45:14 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\Diagnostics
[2015/05/24 02:02:29 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\C2 disclosures
[2015/05/24 02:01:28 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Appraisals
[2015/05/24 02:01:28 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\amort calc
[2015/05/24 02:01:17 | 003,881,888 | ---- | C] (Philipp Winterberg) -- C:\Users\Frank\Documents\InstallRarZilla.exe
[2015/05/24 02:01:02 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Web Pages
[2015/05/24 02:00:47 | 000,000,000 | R--D | C] -- C:\Users\Frank\Documents\Scanned Documents
[2015/05/24 02:00:47 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Taxes
[2015/05/24 02:00:46 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Samples
[2015/05/24 02:00:46 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Samples (PaperPort 14)
[2015/05/24 02:00:19 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Receipts
[2015/05/24 02:00:16 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Rebates
[2015/05/24 02:00:16 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Real Estate
[2015/05/24 02:00:14 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Reading Library
[2015/05/24 02:00:14 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Presentations
[2015/05/24 02:00:14 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Photographs
[2015/05/24 02:00:14 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\PDF Favorites
[2015/05/24 01:57:59 | 000,000,000 | R--D | C] -- C:\Users\Frank\Documents\Notes
[2015/05/24 01:57:59 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Old files
[2015/05/24 01:57:58 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\My RoboForm Data
[2015/05/24 01:57:58 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\My Data Sources
[2015/05/24 01:57:01 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Mortgage Stuff 120807
[2015/05/24 01:46:07 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Mortage Pending
[2015/05/24 01:46:05 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Modem_Motorola_6.10.05_Xpx86
[2015/05/24 01:46:05 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Miscellaneous Business Cards
[2015/05/24 01:46:03 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\House Stuff 2011
[2015/05/24 01:45:30 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\House stuff
[2015/05/24 01:44:56 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\House Papers
[2015/05/24 01:44:55 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Health Insurance
[2015/05/24 01:44:33 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Health Clients
[2015/05/24 01:44:33 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Faxes
[2015/05/24 01:44:33 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Fax
[2015/05/24 01:44:31 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\DVDVideoSoft
[2015/05/24 01:44:27 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\Downloads
[2015/05/24 01:44:27 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\cache
[2015/05/24 01:44:27 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\C2 Financial
[2015/05/24 00:54:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ddf0a677-4448-4dbc-9e46-351f2751f2b9
[2015/05/23 00:33:49 | 000,000,000 | ---D | C] -- C:\WINPOINT
[2015/05/22 21:48:30 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Roaming\Macromedia
[2015/05/20 11:14:49 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2015/05/19 17:42:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MMTaskbar
[2015/05/19 09:59:15 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat
[2015/05/19 09:59:15 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat
[2015/05/19 09:47:59 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
[2015/05/19 09:47:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
[2015/05/19 09:45:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mouse and Keyboard Center
[2015/05/19 09:45:29 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Mouse and Keyboard Center
[2015/05/16 21:30:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Google
[2015/05/16 21:15:46 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
[2015/05/16 21:11:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2015/05/16 21:10:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2015/05/16 21:10:47 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\Google
[2015/05/16 21:10:29 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\Deployment
[2015/05/16 14:08:41 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\Samsung
[2015/05/16 14:08:39 | 000,474,624 | ---- | C] (Samsung Software Center) -- C:\Windows\prinst.exe
[2015/05/16 14:08:36 | 000,420,032 | ---- | C] (Samsung Electronics Co., Ltd.) -- C:\Windows\SysNative\NetFaxPort64.dll
[2015/05/16 14:08:35 | 000,465,920 | ---- | C] (Samsung Software Center) -- C:\Windows\InstallSupport.exe
[2015/05/16 14:08:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Scan Process Machine
[2015/05/16 14:08:03 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers
[2015/05/16 14:08:03 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Roaming\Samsung
[2015/05/16 14:08:03 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Common Desktop Agent
[2015/05/16 14:08:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Common Desktop Agent
[2015/05/16 14:07:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Samsung
[2015/05/16 14:07:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SamsungPrinterLiveUpdateInstaller
[2015/05/16 14:07:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SamsungPrinterLiveUpdate
[2015/05/16 14:07:18 | 000,686,384 | ---- | C] (Samsung Electronics) -- C:\Windows\SysNative\eed_sl.exe
[2015/05/16 14:07:16 | 000,158,040 | ---- | C] (SS) -- C:\Windows\SysNative\ssa7mci.exe
[2015/05/16 14:07:16 | 000,089,600 | ---- | C] (SS) -- C:\Windows\SysNative\ssa7mci.dll
[2015/05/16 14:07:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Samsung
[2015/05/16 12:36:32 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Insurance Calculator
[2015/05/16 10:10:51 | 000,000,000 | ---D | C] -- C:\WINPOINT_BAK0
[2015/05/16 09:27:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Insurance Calculator
[2015/05/16 09:27:35 | 000,000,000 | ---D | C] -- C:\DSI
[2015/05/16 08:51:01 | 000,000,000 | R--D | C] -- C:\Users\Frank\Desktop\Worth Keping
[2015/05/16 08:49:28 | 000,340,768 | ---- | C] (Sheridan Software Systems, Inc.) -- C:\Windows\SysWow64\SSA3D30.OCX
[2015/05/16 08:49:28 | 000,249,856 | ---- | C] (Inner Media, Inc.) -- C:\Windows\SysWow64\dzactx.dll
[2015/05/16 08:49:28 | 000,229,376 | ---- | C] (Inner Media, Inc.) -- C:\Windows\SysWow64\duzactx.dll
[2015/05/16 08:49:24 | 000,000,000 | ---D | C] -- C:\Windows\dsinstmp
[2015/05/16 02:25:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2015/05/16 02:25:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2015/05/16 02:24:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2015/05/16 02:24:30 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\Adobe
[2015/05/16 02:07:37 | 000,000,000 | ---D | C] -- C:\ProgramData\RoboForm
[2015/05/16 02:07:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AI RoboForm
[2015/05/16 01:37:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Siber Systems
[2015/05/16 00:57:49 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Roaming\AVAST Software
[2015/05/16 00:56:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
[2015/05/16 00:56:39 | 000,137,288 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswStm.sys
[2015/05/16 00:56:38 | 000,442,264 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswSP.sys
[2015/05/16 00:56:36 | 000,089,944 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2015/05/16 00:56:35 | 000,093,528 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2015/05/16 00:56:34 | 001,047,320 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2015/05/16 00:56:33 | 000,364,472 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\SysNative\aswBoot.exe
[2015/05/16 00:56:30 | 000,043,112 | ---- | C] (Avast Software s.r.o.) -- C:\Windows\avastSS.scr
[2015/05/16 00:55:29 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2015/05/15 18:04:23 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\OfficeDrop
[2015/05/15 18:04:19 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nuance PaperPort 14
[2015/05/15 18:04:03 | 000,000,000 | ---D | C] -- C:\Program Files\Nuance
[2015/05/15 18:02:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Zeon
[2015/05/15 18:00:19 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2015/05/15 17:59:58 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Roaming\Zeon
[2015/05/15 17:59:58 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Roaming\Nuance
[2015/05/15 17:59:52 | 000,000,000 | ---D | C] -- C:\ProgramData\ScanSoft
[2015/05/15 17:59:52 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Roaming\.oit
[2015/05/15 17:59:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance PaperPort 14
[2015/05/15 17:59:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ScanSoft Shared
[2015/05/15 17:59:41 | 000,000,000 | ---D | C] -- C:\Windows\PIXTRAN
[2015/05/15 17:59:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Macrovision
[2015/05/15 17:59:41 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet
[2015/05/15 17:59:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Nuance
[2015/05/15 17:59:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nuance
[2015/05/15 17:17:31 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2015/05/15 16:22:37 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Roaming\Calyx Software
[2015/05/15 16:22:16 | 001,064,960 | ---- | C] (Amyuni Technologies
http://www.amyuni.com) -- C:\Windows\SysWow64\cdintf300.dll
[2015/05/15 16:22:16 | 001,064,960 | ---- | C] (Amyuni Technologies
http://www.amyuni.com) -- C:\Windows\SysWow64\acXMLParser.dll
[2015/05/15 16:21:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Calyx Software
[2015/05/15 16:21:47 | 000,000,000 | ---D | C] -- C:\PNTTEMPL
[2015/05/15 16:21:47 | 000,000,000 | ---D | C] -- C:\PNTDATA
[2015/05/15 13:21:26 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2015/05/15 13:19:09 | 000,000,000 | ---D | C] -- C:\Windows\CSC
[2015/05/15 13:18:42 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2015/05/15 13:17:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2015/05/15 13:15:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works
[2015/05/15 13:15:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio
[2015/05/15 13:15:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2015/05/15 13:15:34 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2015/05/15 13:06:33 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2015/05/15 13:06:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2015/05/15 13:06:01 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\Microsoft Help
[2015/05/15 13:06:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2015/05/15 12:52:32 | 000,000,000 | ---D | C] -- C:\Users\Frank\Documents\My PaperPort Documents
[2015/05/15 12:19:22 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\Apps
[2015/05/15 10:54:04 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Roaming\Mozilla
[2015/05/15 10:54:04 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\Mozilla
[2015/05/15 10:53:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2015/05/15 10:53:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2015/05/15 10:53:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2015/05/15 10:53:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2015/05/15 10:49:53 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2015/05/15 10:46:41 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\NVIDIA Corporation
[2015/05/15 10:45:38 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2015/05/15 10:45:38 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2015/05/15 10:45:36 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\NVIDIA
[2015/05/15 10:45:26 | 002,601,816 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
[2015/05/15 10:45:26 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
[2015/05/15 10:45:26 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2015/05/15 10:45:26 | 000,372,936 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2015/05/15 10:45:26 | 000,338,336 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2015/05/15 10:45:26 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2015/05/15 10:45:26 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2015/05/15 10:45:26 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2015/05/15 10:45:26 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2015/05/15 10:45:26 | 000,201,928 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2015/05/15 10:45:26 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2015/05/15 10:45:26 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2015/05/15 10:45:26 | 000,099,016 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2015/05/15 10:45:26 | 000,076,488 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2015/05/15 10:45:24 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2015/05/15 10:42:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2015/05/15 10:42:33 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2015/05/15 10:42:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2015/05/15 10:41:58 | 000,072,904 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2015/05/15 10:41:58 | 000,059,592 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2015/05/15 10:41:54 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2015/05/15 10:41:39 | 000,406,632 | ---- | C] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
[2015/05/15 10:41:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2015/05/15 10:40:31 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2015/05/15 10:40:15 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2015/05/15 10:39:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asmedia Technology
[2015/05/15 10:36:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ASM104xUSB3
[2015/05/15 10:36:15 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
[2015/05/15 10:36:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD
[2015/05/15 10:35:50 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2015/05/15 10:35:45 | 000,000,000 | -HSD | C] -- C:\Users\Frank\AppData\Local\EmieUserList
[2015/05/15 10:35:45 | 000,000,000 | -HSD | C] -- C:\Users\Frank\AppData\Local\EmieSiteList
[2015/05/15 10:35:45 | 000,000,000 | -HSD | C] -- C:\Users\Frank\AppData\Local\EmieBrowserModeList
[2015/05/15 10:35:10 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2015/05/15 10:33:17 | 000,015,408 | ---- | C] (BIOSTAR Group) -- C:\Windows\SysNative\drivers\BS_I2c64.sys
[2015/05/15 10:33:16 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2015/05/15 10:33:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BIOSTAR
[2015/05/15 10:33:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2015/05/15 10:32:54 | 000,014,136 | R--- | C] (BIOSTAR Group) -- C:\Windows\SysWow64\drivers\BIOS64.sys
[2015/05/15 10:26:13 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\http___www.julien-manici
[2015/05/15 10:25:06 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Roaming\Adobe
[2015/05/15 10:25:05 | 000,000,000 | R--D | C] -- C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2015/05/15 10:25:05 | 000,000,000 | R--D | C] -- C:\Users\Frank\Searches
[2015/05/15 10:25:05 | 000,000,000 | R--D | C] -- C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2015/05/15 10:25:05 | 000,000,000 | -H-D | C] -- C:\Users\Frank\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2015/05/15 10:24:57 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Roaming\Identities
[2015/05/15 10:24:56 | 000,000,000 | R--D | C] -- C:\Users\Frank\Contacts
[2015/05/15 10:24:54 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\VirtualStore
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\AppData\Local\Temporary Internet Files
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\Templates
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\Start Menu
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\SendTo
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\Recent
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\PrintHood
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\NetHood
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\Documents\My Videos
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\Documents\My Pictures
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\Documents\My Music
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\My Documents
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\Local Settings
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\AppData\Local\History
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\Cookies
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\Application Data
[2015/05/15 10:24:50 | 000,000,000 | -HSD | C] -- C:\Users\Frank\AppData\Local\Application Data
[2015/05/15 10:24:49 | 000,000,000 | --SD | C] -- C:\Users\Frank\AppData\Roaming\Microsoft
[2015/05/15 10:24:49 | 000,000,000 | R--D | C] -- C:\Users\Frank\Videos
[2015/05/15 10:24:49 | 000,000,000 | R--D | C] -- C:\Users\Frank\Saved Games
[2015/05/15 10:24:49 | 000,000,000 | R--D | C] -- C:\Users\Frank\Pictures
[2015/05/15 10:24:49 | 000,000,000 | R--D | C] -- C:\Users\Frank\Music
[2015/05/15 10:24:49 | 000,000,000 | R--D | C] -- C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2015/05/15 10:24:49 | 000,000,000 | R--D | C] -- C:\Users\Frank\Links
[2015/05/15 10:24:49 | 000,000,000 | R--D | C] -- C:\Users\Frank\Favorites
[2015/05/15 10:24:49 | 000,000,000 | R--D | C] -- C:\Users\Frank\Downloads
[2015/05/15 10:24:49 | 000,000,000 | R--D | C] -- C:\Users\Frank\Documents
[2015/05/15 10:24:49 | 000,000,000 | R--D | C] -- C:\Users\Frank\Desktop
[2015/05/15 10:24:49 | 000,000,000 | R--D | C] -- C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2015/05/15 10:24:49 | 000,000,000 | -H-D | C] -- C:\Users\Frank\AppData
[2015/05/15 10:24:49 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\Temp
[2015/05/15 10:24:49 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Local\Microsoft
[2015/05/15 10:24:49 | 000,000,000 | ---D | C] -- C:\Users\Frank\AppData\Roaming\Media Center Programs
[2015/05/15 10:23:59 | 000,000,000 | -HSD | C] -- C:\Recovery

========== Files - Modified Within 30 Days ==========

[2015/05/25 12:58:16 | 000,781,298 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2015/05/25 12:58:16 | 000,661,656 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2015/05/25 12:58:16 | 000,121,524 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2015/05/25 12:52:21 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015/05/25 12:52:18 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015/05/25 12:52:16 | 3220,676,608 | -HS- | M] () -- C:\hiberfil.sys
[2015/05/25 12:28:45 | 000,021,088 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015/05/25 12:28:45 | 000,021,088 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015/05/25 12:28:16 | 000,136,408 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2015/05/25 12:21:23 | 000,000,207 | ---- | M] () -- C:\Windows\tweaking.com-regbackup-FRANK-PC-Windows-7-Professional-(64-bit).dat
[2015/05/25 12:21:00 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2015/05/25 11:43:40 | 000,000,000 | ---- | M] () -- C:\Users\Frank\Documents\Nuance Image Printer Writer Port
[2015/05/23 23:50:39 | 000,003,584 | ---- | M] () -- C:\Users\Frank\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2015/05/21 21:25:52 | 000,040,372 | ---- | M] () -- C:\Users\Frank\Documents\Capture test.JPG
[2015/05/19 17:42:46 | 000,001,032 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MultiMon Taskbar.lnk
[2015/05/19 10:05:51 | 000,413,728 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2015/05/19 09:52:34 | 000,773,536 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2015/05/19 09:45:48 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_point64_01011.Wdf
[2015/05/19 09:45:40 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_NuidFltr_01011.Wdf
[2015/05/19 09:44:21 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_dc3d_01011.Wdf
[2015/05/19 09:41:21 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_dc3d_01009.Wdf
[2015/05/18 18:30:29 | 000,000,347 | ---- | M] () -- C:\Users\Frank\Documents\My Documents.lnk
[2015/05/18 15:47:50 | 000,094,005 | ---- | M] () -- C:\Users\Frank\Documents\motherboard biostar specs.pdf
[2015/05/16 21:27:03 | 000,002,279 | ---- | M] () -- C:\Users\Frank\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2015/05/16 12:36:32 | 000,000,033 | ---- | M] () -- C:\Windows\dsi.ini
[2015/05/16 08:36:28 | 000,400,591 | ---- | M] () -- C:\Users\Frank\Documents\New Leaf submission checklist.pdf
[2015/05/16 00:56:33 | 000,442,264 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswSP.sys
[2015/05/16 00:56:33 | 000,364,472 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\SysNative\aswBoot.exe
[2015/05/16 00:56:33 | 000,272,248 | ---- | M] () -- C:\Windows\SysNative\drivers\aswVmm.sys
[2015/05/16 00:56:33 | 000,137,288 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswStm.sys
[2015/05/16 00:56:33 | 000,093,528 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2015/05/16 00:56:33 | 000,089,944 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2015/05/16 00:56:33 | 000,065,736 | ---- | M] () -- C:\Windows\SysNative\drivers\aswRvrt.sys
[2015/05/16 00:56:33 | 000,029,168 | ---- | M] () -- C:\Windows\SysNative\drivers\aswHwid.sys
[2015/05/16 00:56:30 | 000,043,112 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\avastSS.scr
[2015/05/16 00:56:29 | 001,047,320 | ---- | M] (Avast Software s.r.o.) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2015/05/15 21:47:03 | 003,462,799 | -H-- | M] () -- C:\Users\Frank\Documents\PP11Thumbs.ptn
[2015/05/15 21:47:03 | 000,011,640 | -H-- | M] () -- C:\Users\Frank\Documents\.ppinfocache
[2015/05/15 21:47:03 | 000,009,801 | -H-- | M] () -- C:\Users\Frank\Documents\maxdesk.ini2
[2015/05/15 21:47:03 | 000,003,248 | -H-- | M] () -- C:\Users\Frank\Documents\PP11Thumbs.ptn2
[2015/05/15 17:59:48 | 000,002,072 | ---- | M] () -- C:\Users\Public\Desktop\PaperPort.lnk
[2015/05/15 16:23:25 | 000,000,720 | ---- | M] () -- C:\Windows\winpoint.ini
[2015/05/15 16:22:38 | 000,000,058 | ---- | M] () -- C:\Windows\mchguid.ini
[2015/05/15 16:22:38 | 000,000,058 | ---- | M] () -- C:\ProgramData\mchguid.ini
[2015/05/15 16:21:55 | 000,001,590 | ---- | M] () -- C:\Users\Public\Desktop\Point.lnk
[2015/05/15 15:23:29 | 000,001,133 | ---- | M] () -- C:\Users\Frank\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk
[2015/05/15 13:21:36 | 000,041,450 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2015/05/15 13:21:36 | 000,041,450 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2015/05/15 13:20:02 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2015/05/15 13:17:10 | 000,002,693 | ---- | M] () -- C:\Users\Frank\Desktop\Microsoft Office Word 2007.lnk
[2015/05/15 10:53:58 | 000,000,376 | ---- | M] () -- C:\Windows\ODBC.INI
[2015/05/15 10:44:38 | 000,000,169 | ---- | M] () -- C:\Windows\setup.iss
[2015/05/15 10:35:43 | 000,001,407 | ---- | M] () -- C:\Users\Frank\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2015/05/12 11:07:31 | 003,856,197 | ---- | M] () -- C:\Users\Frank\Documents\telephone manual att 2 line.pdf
[2015/05/11 16:50:25 | 000,332,900 | ---- | M] () -- C:\Users\Frank\Documents\US Bank basic guidelines.pdf
 
4. OTL log part 2

========== Files Created - No Company Name ==========

[2015/05/25 12:21:23 | 000,000,207 | ---- | C] () -- C:\Windows\tweaking.com-regbackup-FRANK-PC-Windows-7-Professional-(64-bit).dat
[2015/05/24 02:01:28 | 000,627,904 | ---- | C] () -- C:\Users\Frank\Documents\What is this pop up_.pdf
[2015/05/24 02:01:28 | 000,354,422 | ---- | C] () -- C:\Users\Frank\Documents\yankees logo 2.jpg
[2015/05/24 02:01:28 | 000,192,201 | ---- | C] () -- C:\Users\Frank\Documents\Wellness-Consult.pdf
[2015/05/24 02:01:28 | 000,171,698 | ---- | C] () -- C:\Users\Frank\Documents\zip.jpg
[2015/05/24 02:01:28 | 000,159,357 | ---- | C] () -- C:\Users\Frank\Documents\zip2.JPG
[2015/05/24 02:01:28 | 000,144,484 | R--- | C] () -- C:\Users\Frank\Documents\wilkinson hud.pdf
[2015/05/24 02:01:28 | 000,093,173 | ---- | C] () -- C:\Users\Frank\Documents\zip3.JPG
[2015/05/24 02:01:28 | 000,092,951 | ---- | C] () -- C:\Users\Frank\Documents\zipfinal.JPG
[2015/05/24 02:01:27 | 004,750,813 | ---- | C] () -- C:\Users\Frank\Documents\UHC Golden Rule Health Insurance Brochure.pdf
[2015/05/24 02:01:27 | 001,024,473 | ---- | C] () -- C:\Users\Frank\Documents\trackman numbers pros.pdf
[2015/05/24 02:01:27 | 000,996,318 | ---- | C] () -- C:\Users\Frank\Documents\visa bill.pdf
[2015/05/24 02:01:27 | 000,555,240 | ---- | C] () -- C:\Users\Frank\Documents\vitamin info.pdf
[2015/05/24 02:01:27 | 000,482,729 | ---- | C] () -- C:\Users\Frank\Documents\vitamin info (2).pdf
[2015/05/24 02:01:27 | 000,472,667 | ---- | C] () -- C:\Users\Frank\Documents\trackman numbers frank.pdf
[2015/05/24 02:01:27 | 000,462,088 | ---- | C] () -- C:\Users\Frank\Documents\USDA loan.pdf
[2015/05/24 02:01:27 | 000,458,664 | ---- | C] () -- C:\Users\Frank\Documents\Tires Plus Total Car Care - Power Up Your Battery Knowledge - Final Quote.pdf
[2015/05/24 02:01:27 | 000,332,900 | ---- | C] () -- C:\Users\Frank\Documents\US Bank basic guidelines.pdf
[2015/05/24 02:01:27 | 000,268,842 | ---- | C] () -- C:\Users\Frank\Documents\Transmission Terminology - Rebuilt vs Remanufactured, Automatic vs Manual, etc.pdf
[2015/05/24 02:01:27 | 000,171,033 | ---- | C] () -- C:\Users\Frank\Documents\VOE REQUEST (2).pdf
[2015/05/24 02:01:27 | 000,127,367 | ---- | C] () -- C:\Users\Frank\Documents\VOE comments page.pdf
[2015/05/24 02:01:27 | 000,085,395 | ---- | C] () -- C:\Users\Frank\Documents\VOE REQUEST.pdf
[2015/05/24 02:01:27 | 000,083,425 | ---- | C] () -- C:\Users\Frank\Documents\Verizon - Checkout Order Summary.pdf
[2015/05/24 02:01:27 | 000,073,635 | ---- | C] () -- C:\Users\Frank\Documents\voe request1.pdf
[2015/05/24 02:01:27 | 000,045,453 | ---- | C] () -- C:\Users\Frank\Documents\Walmart.pdf
[2015/05/24 02:01:27 | 000,043,551 | ---- | C] () -- C:\Users\Frank\Documents\Tires Plus Total Car Care - Power Up Your Battery Knowledge - Final Quote (2).pdf
[2015/05/24 02:01:27 | 000,040,453 | ---- | C] () -- C:\Users\Frank\Documents\trish reading.pdf
[2015/05/24 02:01:27 | 000,036,575 | ---- | C] () -- C:\Users\Frank\Documents\Training.pdf
[2015/05/24 02:01:27 | 000,026,261 | ---- | C] () -- C:\Users\Frank\Documents\test.jpg
[2015/05/24 02:01:27 | 000,025,966 | ---- | C] () -- C:\Users\Frank\Documents\Walgreens Photo Center _ Thanks for Your Order.pdf
[2015/05/24 02:01:27 | 000,024,226 | ---- | C] () -- C:\Users\Frank\Documents\test2.jpg
[2015/05/24 02:01:27 | 000,012,178 | ---- | C] () -- C:\Users\Frank\Documents\voe final.rtf
[2015/05/24 02:01:27 | 000,004,878 | R--- | C] () -- C:\Users\Frank\Documents\valez.fnm
[2015/05/24 02:01:26 | 011,361,695 | R--- | C] () -- C:\Users\Frank\Documents\swing fo
[2015/05/24 02:01:26 | 003,856,197 | ---- | C] () -- C:\Users\Frank\Documents\telephone manual att 2 line.pdf
[2015/05/24 02:01:26 | 001,304,413 | ---- | C] () -- C:\Users\Frank\Documents\StearnsTimeline Foreclosure etc.pdf
[2015/05/24 02:01:26 | 000,633,871 | ---- | C] () -- C:\Users\Frank\Documents\STERNS C OF C.pdf
[2015/05/24 02:01:26 | 000,236,467 | ---- | C] () -- C:\Users\Frank\Documents\SUBORDINATION B OF A.pdf
[2015/05/24 02:01:26 | 000,130,741 | ---- | C] () -- C:\Users\Frank\Documents\stearns submission checklist.pdf
[2015/05/24 02:01:26 | 000,073,089 | ---- | C] () -- C:\Users\Frank\Documents\taxes at closing if waive escrow.pdf
[2015/05/24 02:01:26 | 000,062,231 | ---- | C] () -- C:\Users\Frank\Documents\taxes at closing if escrowing.pdf
[2015/05/24 02:01:26 | 000,041,079 | ---- | C] () -- C:\Users\Frank\Documents\sw paperwork.pdf
[2015/05/24 02:01:25 | 004,104,146 | ---- | C] () -- C:\Users\Frank\Documents\scan0431 (2).pdf
[2015/05/24 02:01:25 | 003,214,527 | ---- | C] () -- C:\Users\Frank\Documents\scan0431.pdf
[2015/05/24 02:01:25 | 002,172,169 | ---- | C] () -- C:\Users\Frank\Documents\santa anita breeders cup day.pdf
[2015/05/24 02:01:25 | 002,155,958 | ---- | C] () -- C:\Users\Frank\Documents\specimen note and mortgage documents.pdf
[2015/05/24 02:01:25 | 001,462,799 | ---- | C] () -- C:\Users\Frank\Documents\Steans timeline short sale etc.pdf
[2015/05/24 02:01:25 | 001,024,863 | R--- | C] () -- C:\Users\Frank\Documents\securedoc_20120518T203156.html
[2015/05/24 02:01:25 | 000,900,946 | ---- | C] () -- C:\Users\Frank\Documents\SINK.JPG
[2015/05/24 02:01:25 | 000,581,283 | ---- | C] () -- C:\Users\Frank\Documents\sample signed closing package.pdf
[2015/05/24 02:01:25 | 000,567,327 | ---- | C] () -- C:\Users\Frank\Documents\SS awards letter sample.pdf
[2015/05/24 02:01:25 | 000,525,834 | ---- | C] () -- C:\Users\Frank\Documents\southbeach food list.pdf
[2015/05/24 02:01:25 | 000,504,432 | ---- | C] () -- C:\Users\Frank\Documents\standard-form-180.pdf
[2015/05/24 02:01:25 | 000,237,991 | ---- | C] () -- C:\Users\Frank\Documents\scan0431 (2)rrrr.pdf
[2015/05/24 02:01:25 | 000,195,393 | ---- | C] () -- C:\Users\Frank\Documents\Stearns doc order form.pdf
[2015/05/24 02:01:25 | 000,171,794 | ---- | C] () -- C:\Users\Frank\Documents\stearns fha case number request.pdf
[2015/05/24 02:01:25 | 000,159,840 | ---- | C] () -- C:\Users\Frank\Documents\SAMPLE NOTE.pdf
[2015/05/24 02:01:25 | 000,154,506 | ---- | C] () -- C:\Users\Frank\Documents\Stearns gift letter fha.pdf
[2015/05/24 02:01:25 | 000,147,847 | ---- | C] () -- C:\Users\Frank\Documents\Stearns mortgagee clauses.pdf
[2015/05/24 02:01:25 | 000,115,792 | ---- | C] () -- C:\Users\Frank\Documents\shoot the messenger.jpg
[2015/05/24 02:01:25 | 000,107,637 | ---- | C] () -- C:\Users\Frank\Documents\stearns submission checklist (2).pdf
[2015/05/24 02:01:25 | 000,107,527 | ---- | C] () -- C:\Users\Frank\Documents\Stearns ssa form.pdf
[2015/05/24 02:01:25 | 000,085,787 | ---- | C] () -- C:\Users\Frank\Documents\Sample 1099 for dividends and interest.pdf
[2015/05/24 02:01:25 | 000,065,595 | ---- | C] () -- C:\Users\Frank\Documents\Social security awards letter sample.pdf
[2015/05/24 02:01:25 | 000,057,900 | ---- | C] () -- C:\Users\Frank\Documents\Stearns rental income calculator.pdf
[2015/05/24 02:01:25 | 000,045,535 | ---- | C] () -- C:\Users\Frank\Documents\solar panels.pdf
[2015/05/24 02:01:25 | 000,042,845 | ---- | C] () -- C:\Users\Frank\Documents\service provider list.pdf
[2015/05/24 02:01:25 | 000,029,033 | ---- | C] () -- C:\Users\Frank\Documents\SATISFACTION OF JUDGMENT.pdf
[2015/05/24 02:01:24 | 001,421,656 | ---- | C] () -- C:\Users\Frank\Documents\ReliefJetEssentialsOutlook.pdf
[2015/05/24 02:01:24 | 000,596,869 | ---- | C] () -- C:\Users\Frank\Documents\Rebuilt Transmission Prices _ Transmission Repair Charlotte NC _ Transmission Rebuild Charlotte NC.pdf
[2015/05/24 02:01:24 | 000,370,182 | ---- | C] () -- C:\Users\Frank\Documents\Rebuilt Transmission vs Used Transmission _ Transmission Repair Charlotte NC _ Transmission Rebuild Charlotte NC.pdf
[2015/05/24 02:01:24 | 000,215,565 | ---- | C] () -- C:\Users\Frank\Documents\Rebuilt Automatic Transmissions & Gears - Rebuilt vs Remanufactured - Auto Car & Truck Transmissions.pdf
[2015/05/24 02:01:24 | 000,189,905 | ---- | C] () -- C:\Users\Frank\Documents\remn rates.pdf
[2015/05/24 02:01:24 | 000,117,700 | R--- | C] () -- C:\Users\Frank\Documents\retrievedocument.go.pdf
[2015/05/24 02:01:23 | 011,852,454 | ---- | C] () -- C:\Users\Frank\Documents\ramick anti.bmp
[2015/05/24 02:01:23 | 003,462,799 | -H-- | C] () -- C:\Users\Frank\Documents\PP11Thumbs.ptn
[2015/05/24 02:01:23 | 002,947,021 | -H-- | C] () -- C:\Users\Frank\Documents\PPThumbs.ptn
[2015/05/24 02:01:23 | 001,835,009 | ---- | C] () -- C:\Users\Frank\Documents\rapid rescore.pdf
[2015/05/24 02:01:23 | 001,629,150 | ---- | C] () -- C:\Users\Frank\Documents\ppFL_0399.pdf
[2015/05/24 02:01:23 | 000,766,492 | ---- | C] () -- C:\Users\Frank\Documents\Plaza mbfa.pdf
[2015/05/24 02:01:23 | 000,370,876 | ---- | C] () -- C:\Users\Frank\Documents\pool heater.pdf
[2015/05/24 02:01:23 | 000,279,604 | ---- | C] () -- C:\Users\Frank\Documents\rate lock advisory 121310.pdf
[2015/05/24 02:01:23 | 000,271,381 | ---- | C] () -- C:\Users\Frank\Documents\point leads.prv
[2015/05/24 02:01:23 | 000,268,800 | ---- | C] () -- C:\Users\Frank\Documents\rate lock advisory 122010.pdf
[2015/05/24 02:01:23 | 000,203,747 | ---- | C] () -- C:\Users\Frank\Documents\rate lock advisory 121610.pdf
[2015/05/24 02:01:23 | 000,194,382 | ---- | C] () -- C:\Users\Frank\Documents\Provident appeal.pdf
[2015/05/24 02:01:23 | 000,178,297 | ---- | C] () -- C:\Users\Frank\Documents\rate lock advisory 121710.pdf
[2015/05/24 02:01:23 | 000,148,973 | ---- | C] () -- C:\Users\Frank\Documents\rate lock advisory 122210.pdf
[2015/05/24 02:01:23 | 000,142,595 | ---- | C] () -- C:\Users\Frank\Documents\rate lock advisory 122110.pdf
[2015/05/24 02:01:23 | 000,114,841 | ---- | C] () -- C:\Users\Frank\Documents\Plaza submission checklist.pdf
[2015/05/24 02:01:23 | 000,054,341 | ---- | C] () -- C:\Users\Frank\Documents\Plaza ss verification form.pdf
[2015/05/24 02:01:23 | 000,054,337 | ---- | C] () -- C:\Users\Frank\Documents\ProviScan.pdf
[2015/05/24 02:01:23 | 000,042,497 | ---- | C] () -- C:\Users\Frank\Documents\pod_4119110274.pdf
[2015/05/24 02:01:23 | 000,040,529 | ---- | C] () -- C:\Users\Frank\Documents\provident broker_fee_agreement.pdf
[2015/05/24 02:01:23 | 000,029,569 | ---- | C] () -- C:\Users\Frank\Documents\poa template.pdf
[2015/05/24 02:01:23 | 000,012,771 | ---- | C] () -- C:\Users\Frank\Documents\Ramik poa FINAL2.rtf
[2015/05/24 02:01:23 | 000,012,537 | ---- | C] () -- C:\Users\Frank\Documents\Ramik poa.rtf
[2015/05/24 02:01:23 | 000,011,790 | ---- | C] () -- C:\Users\Frank\Documents\Ramik poa FINAL.rtf
[2015/05/24 02:01:23 | 000,003,248 | -H-- | C] () -- C:\Users\Frank\Documents\PP11Thumbs.ptn2
[2015/05/24 02:01:22 | 001,427,287 | ---- | C] () -- C:\Users\Frank\Documents\Pending Docs.pdf
[2015/05/24 02:01:22 | 001,370,008 | ---- | C] () -- C:\Users\Frank\Documents\PF Guidelines Borrower.pdf
[2015/05/24 02:01:22 | 001,189,717 | ---- | C] () -- C:\Users\Frank\Documents\Photograph.pdf
[2015/05/24 02:01:22 | 000,950,317 | ---- | C] () -- C:\Users\Frank\Documents\PF Guidelines Loan.pdf
[2015/05/24 02:01:22 | 000,681,018 | ---- | C] () -- C:\Users\Frank\Documents\Plaza mbfa (2).pdf
[2015/05/24 02:01:22 | 000,576,239 | ---- | C] () -- C:\Users\Frank\Documents\Plaza anti stearing.pdf
[2015/05/24 02:01:22 | 000,553,720 | ---- | C] () -- C:\Users\Frank\Documents\Plaza change of circumstance.pdf
[2015/05/24 02:01:22 | 000,338,339 | ---- | C] () -- C:\Users\Frank\Documents\plaza fha submission checklist.pdf
[2015/05/24 02:01:22 | 000,117,702 | ---- | C] () -- C:\Users\Frank\Documents\photo2.JPG
[2015/05/24 02:01:22 | 000,113,386 | ---- | C] () -- C:\Users\Frank\Documents\PHAM DOCS.zip
[2015/05/24 02:01:22 | 000,070,346 | ---- | C] () -- C:\Users\Frank\Documents\Plaza appraisal fee schedule.pdf
[2015/05/24 02:01:22 | 000,036,849 | ---- | C] () -- C:\Users\Frank\Documents\pension awards letter sample.pdf
[2015/05/24 02:01:21 | 005,620,270 | ---- | C] () -- C:\Users\Frank\Documents\P1010027.JPG
[2015/05/24 02:01:21 | 005,109,086 | ---- | C] () -- C:\Users\Frank\Documents\Old client list for edit.pdf
[2015/05/24 02:01:21 | 002,842,212 | ---- | C] () -- C:\Users\Frank\Documents\Money Book.pdf
[2015/05/24 02:01:21 | 002,279,373 | ---- | C] () -- C:\Users\Frank\Documents\Moms ChannelLineup.pdf
[2015/05/24 02:01:21 | 001,271,677 | ---- | C] () -- C:\Users\Frank\Documents\paperport install.pdf
[2015/05/24 02:01:21 | 000,652,641 | ---- | C] () -- C:\Users\Frank\Documents\Moms debt.pdf
[2015/05/24 02:01:21 | 000,409,653 | ---- | C] () -- C:\Users\Frank\Documents\Old clients a to z.prv
[2015/05/24 02:01:21 | 000,408,132 | ---- | C] () -- C:\Users\Frank\Documents\old client list final.prv
[2015/05/24 02:01:21 | 000,400,591 | ---- | C] () -- C:\Users\Frank\Documents\New Leaf submission checklist.pdf
[2015/05/24 02:01:21 | 000,279,481 | ---- | C] () -- C:\Users\Frank\Documents\NMLS Renewal Evidence - Step-by-Step Instructions.pdf
[2015/05/24 02:01:21 | 000,254,415 | ---- | C] () -- C:\Users\Frank\Documents\outbind___3-0000000083E19826CD4EB445A5BAEFB1FED289B7C40D3C00_.pdf
[2015/05/24 02:01:21 | 000,241,865 | ---- | C] () -- C:\Users\Frank\Documents\okeeffe revised gfg with escrow.pdf
[2015/05/24 02:01:21 | 000,240,477 | ---- | C] () -- C:\Users\Frank\Documents\parr.pdf
[2015/05/24 02:01:21 | 000,176,156 | ---- | C] () -- C:\Users\Frank\Documents\mom stuff.pdf
[2015/05/24 02:01:21 | 000,141,704 | ---- | C] () -- C:\Users\Frank\Documents\paperport 9 with windows 7.pdf
[2015/05/24 02:01:21 | 000,134,692 | ---- | C] () -- C:\Users\Frank\Documents\MOMS EULOGY.pdf
[2015/05/24 02:01:21 | 000,110,184 | ---- | C] () -- C:\Users\Frank\Documents\OWNERS TITLE POLICY SAMPLE.pdf
[2015/05/24 02:01:21 | 000,094,005 | ---- | C] () -- C:\Users\Frank\Documents\motherboard biostar specs.pdf
[2015/05/24 02:01:21 | 000,078,811 | ---- | C] () -- C:\Users\Frank\Documents\moms SNF benefit.JPG
[2015/05/24 02:01:21 | 000,077,650 | ---- | C] () -- C:\Users\Frank\Documents\page doc order.pdf
[2015/05/24 02:01:21 | 000,039,831 | ---- | C] () -- C:\Users\Frank\Documents\Page 1.pdf
[2015/05/24 02:01:21 | 000,031,639 | ---- | C] () -- C:\Users\Frank\Documents\monitor return label.pdf
[2015/05/24 02:01:21 | 000,022,465 | ---- | C] () -- C:\Users\Frank\Documents\mom contact info.pdf
[2015/05/24 02:01:21 | 000,015,105 | ---- | C] () -- C:\Users\Frank\Documents\outbind___2-000000003892759F8F6EF940990F6EABD19954DE64712F00_.pdf
[2015/05/24 02:01:21 | 000,006,178 | ---- | C] () -- C:\Users\Frank\Documents\moss loe.rtf
[2015/05/24 02:01:21 | 000,000,347 | ---- | C] () -- C:\Users\Frank\Documents\My Documents.lnk
[2015/05/24 02:01:21 | 000,000,000 | ---- | C] () -- C:\Users\Frank\Documents\Nuance Image Printer Writer Port
[2015/05/24 02:01:20 | 005,487,647 | ---- | C] () -- C:\Users\Frank\Documents\Modem_Motorola_6.10.05_Xpx86.zip
[2015/05/24 02:01:20 | 001,314,887 | ---- | C] () -- C:\Users\Frank\Documents\molinary docs.pdf
[2015/05/24 02:01:20 | 001,141,564 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - The Ceremony headers2 (3).pdf
[2015/05/24 02:01:20 | 001,133,211 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - The Ceremony headers2 (5).pdf
[2015/05/24 02:01:20 | 000,788,209 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - The Ceremony headers2 (4).pdf
[2015/05/24 02:01:20 | 000,676,144 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - The Ceremony headers2 (2).pdf
[2015/05/24 02:01:20 | 000,481,567 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Fan program3.pdf
[2015/05/24 02:01:20 | 000,464,077 | ---- | C] () -- C:\Users\Frank\Documents\misc disclosures.pdf
[2015/05/24 02:01:20 | 000,368,632 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - The Ceremony headers4.pdf
[2015/05/24 02:01:20 | 000,321,601 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - WFHM_MBFD_2011_aes[1].pdf
[2015/05/24 02:01:20 | 000,206,927 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - FHAPlaza FHA Streamline.pdf
[2015/05/24 02:01:20 | 000,154,588 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - The Ceremony headers.pdf
[2015/05/24 02:01:20 | 000,147,420 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - letter to frank.pdf
[2015/05/24 02:01:20 | 000,140,322 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - letter to frank (2).pdf
[2015/05/24 02:01:20 | 000,094,417 | ---- | C] () -- C:\Users\Frank\Documents\modular vrs manuf.pdf
[2015/05/24 02:01:20 | 000,073,533 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - rsvp 2 good one2 (2).pdf
[2015/05/24 02:01:20 | 000,031,417 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Fan program2 (7).pdf
[2015/05/24 02:01:20 | 000,027,001 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Fan program2 (6).pdf
[2015/05/24 02:01:20 | 000,024,559 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - The Ceremony final.pdf
[2015/05/24 02:01:20 | 000,017,677 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Fan program2 (5).pdf
[2015/05/24 02:01:20 | 000,015,475 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - SAFE Test5 (2).pdf
[2015/05/24 02:01:20 | 000,014,485 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Fan program2 (4).pdf
[2015/05/24 02:01:20 | 000,014,353 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Fan program2 (3).pdf
[2015/05/24 02:01:20 | 000,014,347 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Fan program2.pdf
[2015/05/24 02:01:20 | 000,007,323 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Michael m.pdf
[2015/05/24 02:01:20 | 000,003,885 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - The Ceremony headers2.pdf
[2015/05/24 02:01:19 | 003,999,993 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Broker_Sign-up_Package_with_Instructions_B.pdf
[2015/05/24 02:01:19 | 001,008,637 | -H-- | C] () -- C:\Users\Frank\Documents\Microsoft Outlook Internet Settings.NK2
[2015/05/24 02:01:19 | 000,932,877 | ---- | C] () -- C:\Users\Frank\Documents\loan modification diy.pdf
[2015/05/24 02:01:19 | 000,682,126 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Fan program 4.pdf
[2015/05/24 02:01:19 | 000,516,687 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Document2.pdf
[2015/05/24 02:01:19 | 000,505,243 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Document2 (2).pdf
[2015/05/24 02:01:19 | 000,380,223 | ---- | C] () -- C:\Users\Frank\Documents\mega bill.jpg
[2015/05/24 02:01:19 | 000,343,044 | ---- | C] () -- C:\Users\Frank\Documents\loan application 3 page STREAMLINED.pdf
[2015/05/24 02:01:19 | 000,296,365 | ---- | C] () -- C:\Users\Frank\Documents\loan_application.pdf
[2015/05/24 02:01:19 | 000,227,117 | ---- | C] () -- C:\Users\Frank\Documents\LP Guidelines.pdf
[2015/05/24 02:01:19 | 000,214,761 | ---- | C] () -- C:\Users\Frank\Documents\listening.pdf
[2015/05/24 02:01:19 | 000,202,001 | ---- | C] () -- C:\Users\Frank\Documents\mendes.pdf
[2015/05/24 02:01:19 | 000,193,643 | ---- | C] () -- C:\Users\Frank\Documents\mendes RATE LOCK REQUEST.pdf
[2015/05/24 02:01:19 | 000,190,305 | ---- | C] () -- C:\Users\Frank\Documents\loan application streamlined.pdf
[2015/05/24 02:01:19 | 000,097,995 | ---- | C] () -- C:\Users\Frank\Documents\letter to frank.pdf
[2015/05/24 02:01:19 | 000,075,797 | ---- | C] () -- C:\Users\Frank\Documents\Miami-Dade County.pdf
[2015/05/24 02:01:19 | 000,040,751 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Document1.pdf
[2015/05/24 02:01:19 | 000,037,091 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Document5.pdf
[2015/05/24 02:01:19 | 000,029,169 | ---- | C] () -- C:\Users\Frank\Documents\Long term Care Path.pdf
[2015/05/24 02:01:19 | 000,016,549 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Fan program1.pdf
[2015/05/24 02:01:19 | 000,012,571 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Fan program2 (2).pdf
[2015/05/24 02:01:19 | 000,009,801 | -H-- | C] () -- C:\Users\Frank\Documents\maxdesk.ini2
[2015/05/24 02:01:19 | 000,009,575 | -H-- | C] () -- C:\Users\Frank\Documents\maxdesk.ini
[2015/05/24 02:01:19 | 000,009,097 | ---- | C] () -- C:\Users\Frank\Documents\Microsoft Word - Document134.pdf
[2015/05/24 02:01:18 | 000,913,066 | ---- | C] () -- C:\Users\Frank\Documents\Lease Agreement.pdf
[2015/05/24 02:01:18 | 000,020,480 | ---- | C] () -- C:\Users\Frank\Documents\letter for Howard.dot
[2015/05/24 02:01:18 | 000,010,844 | ---- | C] () -- C:\Users\Frank\Documents\Letter of explanation credit inquiries.pdf
[2015/05/24 02:01:18 | 000,009,423 | ---- | C] () -- C:\Users\Frank\Documents\lead final.pdf
[2015/05/24 02:01:17 | 001,125,254 | ---- | C] () -- C:\Users\Frank\Documents\Income Anyalysis Worsheet.pdf
[2015/05/24 02:01:17 | 000,541,607 | ---- | C] () -- C:\Users\Frank\Documents\LAMINATE INSTALL GUIDE.pdf
[2015/05/24 02:01:17 | 000,301,272 | ---- | C] () -- C:\Users\Frank\Documents\important notice to homebuyersFHA.pdf
[2015/05/24 02:01:17 | 000,258,302 | ---- | C] () -- C:\Users\Frank\Documents\IncomeCalculationWorksheet.pdf
[2015/05/24 02:01:17 | 000,135,269 | ---- | C] () -- C:\Users\Frank\Documents\leach 1st page to appeal.pdf
[2015/05/24 02:01:17 | 000,134,125 | ---- | C] () -- C:\Users\Frank\Documents\Informed Consumer Choice Disclosure.pdf
[2015/05/24 02:01:17 | 000,131,991 | ---- | C] () -- C:\Users\Frank\Documents\joel ap.pdf
[2015/05/24 02:01:17 | 000,128,682 | ---- | C] () -- C:\Users\Frank\Documents\kaeley no points.pdf
[2015/05/24 02:01:17 | 000,091,406 | ---- | C] () -- C:\Users\Frank\Documents\KRUT LETTER.pdf
[2015/05/24 02:01:16 | 000,215,030 | ---- | C] () -- C:\Users\Frank\Documents\https___pfloans.provident.com_secure_plus_LPResponseView.pdf
[2015/05/24 02:01:16 | 000,168,477 | ---- | C] () -- C:\Users\Frank\Documents\https___www.uhone.com_Quote_ShortTermPlansList.pdf
[2015/05/24 02:01:16 | 000,150,239 | ---- | C] () -- C:\Users\Frank\Documents\https___www.ticketmaster.pdf
[2015/05/24 02:01:16 | 000,104,732 | ---- | C] () -- C:\Users\Frank\Documents\https___pfloans.provident.com_secure_rates_Calculator_AllRates (2).pdf
[2015/05/24 02:01:16 | 000,102,946 | ---- | C] () -- C:\Users\Frank\Documents\https___pfloans.provident.com_secure_rates_Calculator_AllRates (4).pdf
[2015/05/24 02:01:16 | 000,097,957 | ---- | C] () -- C:\Users\Frank\Documents\https___pfloans.provident.com_secure_rates_Calculator_AllRates (3).pdf
[2015/05/24 02:01:16 | 000,085,079 | ---- | C] () -- C:\Users\Frank\Documents\https___pfloans.provident.com_secure_rates_Calculator_AllRates.pdf
[2015/05/24 02:01:16 | 000,040,299 | ---- | C] () -- C:\Users\Frank\Documents\https___www.ups.com_u.a_L (3).pdf
[2015/05/24 02:01:16 | 000,027,527 | ---- | C] () -- C:\Users\Frank\Documents\https___www.ticketmaster.com_h_print_popup.pdf
[2015/05/24 02:01:16 | 000,027,527 | ---- | C] () -- C:\Users\Frank\Documents\https___www.ticketmaster (2).pdf
[2015/05/24 02:01:16 | 000,027,527 | ---- | C] () -- C:\Users\Frank\Documents\https___www.ticketmaster (2) (4).pdf
[2015/05/24 02:01:16 | 000,027,527 | ---- | C] () -- C:\Users\Frank\Documents\https___www.ticketmaster (2) (3).pdf
[2015/05/24 02:01:16 | 000,027,527 | ---- | C] () -- C:\Users\Frank\Documents\https___www.ticketmaster (2) (2).pdf
[2015/05/24 02:01:16 | 000,021,781 | ---- | C] () -- C:\Users\Frank\Documents\https___www.ups.com_u.a_L.pdf
[2015/05/24 02:01:16 | 000,021,521 | ---- | C] () -- C:\Users\Frank\Documents\https___www.ups.com_u.a_L (2).pdf
[2015/05/24 02:01:15 | 001,646,569 | ---- | C] () -- C:\Users\Frank\Documents\http___www.mareeducators.pdf
[2015/05/24 02:01:15 | 000,686,571 | ---- | C] () -- C:\Users\Frank\Documents\https___pfloans.provident.com_SECURE_plus_cert.pdf
[2015/05/24 02:01:15 | 000,532,481 | ---- | C] () -- C:\Users\Frank\Documents\http___www.itshotlinks.com_automotive_autotransrepair.pdf
[2015/05/24 02:01:15 | 000,426,145 | ---- | C] () -- C:\Users\Frank\Documents\http___www.brokeroutpost.com_loans_brokers_forum_topic.pdf
[2015/05/24 02:01:15 | 000,268,284 | ---- | C] () -- C:\Users\Frank\Documents\http___www.reddinganesthesia.com_facet%20FAQs.pdf
[2015/05/24 02:01:15 | 000,202,239 | ---- | C] () -- C:\Users\Frank\Documents\https___pfloans.provident.com_secure_plus_lock_info.pdf
[2015/05/24 02:01:15 | 000,179,982 | ---- | C] () -- C:\Users\Frank\Documents\http___www.arnoldsportsfestival.pdf
[2015/05/24 02:01:15 | 000,105,315 | ---- | C] () -- C:\Users\Frank\Documents\https___moneyoptionsinc4.mortgagexsites.pdf
[2015/05/24 02:01:15 | 000,088,419 | ---- | C] () -- C:\Users\Frank\Documents\http___www.tampapainrelief.com_forms_MEDICAL_REQUEST.pdf
[2015/05/24 02:01:15 | 000,056,877 | ---- | C] () -- C:\Users\Frank\Documents\http___www.tampapainrelief.com_forms_AUTHORIZATION_FOR_RELEASE_OF_MEDICAL_RECORDS.pdf
[2015/05/24 02:01:14 | 006,874,862 | ---- | C] () -- C:\Users\Frank\Documents\http___c.sears.com_assets_own_247749e.pdf
[2015/05/24 02:01:14 | 001,687,332 | ---- | C] () -- C:\Users\Frank\Documents\http___c.sears.com_assets_own_247748e.pdf
[2015/05/24 02:01:14 | 000,957,700 | ---- | C] () -- C:\Users\Frank\Documents\http___m3forum.net_m3forum_showthread.pdf
[2015/05/24 02:01:14 | 000,852,663 | ---- | C] () -- C:\Users\Frank\Documents\http___classic.mapquest.pdf
[2015/05/24 02:01:14 | 000,517,711 | ---- | C] () -- C:\Users\Frank\Documents\http___lucasoil.hodgsoncorp.com_slipping_transmission.pdf
[2015/05/24 02:01:14 | 000,211,701 | ---- | C] () -- C:\Users\Frank\Documents\http___classic.mapquest.com_cdn__uac_adpage.pdf
[2015/05/24 02:01:14 | 000,072,172 | ---- | C] () -- C:\Users\Frank\Documents\http___forms.uscourtforms.com_New%20York_pdf_2%20General_Satisfaction%20Of%20Judgment.pdf
[2015/05/24 02:01:14 | 000,049,292 | ---- | C] () -- C:\Users\Frank\Documents\http___forms.uscourtforms.pdf
[2015/05/24 02:01:14 | 000,049,159 | ---- | C] () -- C:\Users\Frank\Documents\http___tampa.craigslist.org_hil_for_2320224087.pdf
[2015/05/24 02:01:14 | 000,024,351 | ---- | C] () -- C:\Users\Frank\Documents\How to Refinance In 52 Minutes.pdf
[2015/05/24 02:01:14 | 000,012,644 | ---- | C] () -- C:\Users\Frank\Documents\How to Refi In 52.rtf
[2015/05/24 02:01:13 | 001,437,079 | ---- | C] () -- C:\Users\Frank\Documents\harley wester closing docs.pdf
[2015/05/24 02:01:13 | 001,437,043 | ---- | C] () -- C:\Users\Frank\Documents\harley wester closing docs final.pdf
[2015/05/24 02:01:13 | 000,260,558 | ---- | C] () -- C:\Users\Frank\Documents\health insurance benefits.pdf
[2015/05/24 02:01:13 | 000,240,011 | ---- | C] () -- C:\Users\Frank\Documents\HECKSHER good faith guarantee 4.75%.pdf
[2015/05/24 02:01:13 | 000,239,971 | ---- | C] () -- C:\Users\Frank\Documents\HECKSHER good faith guarantee 4.875%.pdf
[2015/05/24 02:01:13 | 000,239,633 | ---- | C] () -- C:\Users\Frank\Documents\HECKSHER good faith guarantee 4.625%.pdf
[2015/05/24 02:01:13 | 000,051,189 | ---- | C] () -- C:\Users\Frank\Documents\hip exercise.pdf
[2015/05/24 02:01:13 | 000,026,303 | ---- | C] () -- C:\Users\Frank\Documents\Here is a little homework to prepare for our meeting on Saturday.pdf
[2015/05/24 02:01:13 | 000,021,633 | ---- | C] () -- C:\Users\Frank\Documents\How to get a loan for your home purchase in 50 minutes.pdf
[2015/05/24 02:01:13 | 000,012,394 | ---- | C] () -- C:\Users\Frank\Documents\How to Refi In 52 purchase.rtf
[2015/05/24 02:01:12 | 034,001,859 | ---- | C] () -- C:\Users\Frank\Documents\GogginTax Return 2010.pdf
[2015/05/24 02:01:12 | 000,074,677 | ---- | C] () -- C:\Users\Frank\Documents\Guest%20List(1).pdf
[2015/05/24 02:01:12 | 000,057,979 | ---- | C] () -- C:\Users\Frank\Documents\GOOD FAITH GUARANTEE $347500.pdf
[2015/05/24 02:01:12 | 000,057,815 | ---- | C] () -- C:\Users\Frank\Documents\Good faith guarantee for $335,000.pdf
[2015/05/24 02:01:12 | 000,029,315 | ---- | C] () -- C:\Users\Frank\Documents\GOOD FAITH GUARANTEE 325.pdf
[2015/05/24 02:01:12 | 000,020,992 | ---- | C] () -- C:\Users\Frank\Documents\good faith guarantee.dot
[2015/05/24 02:01:12 | 000,007,326 | ---- | C] () -- C:\Users\Frank\Documents\good faith guarantee.rtf
[2015/05/24 02:01:12 | 000,006,347 | ---- | C] () -- C:\Users\Frank\Documents\harder zoning report.pdf
[2015/05/24 02:01:11 | 012,945,367 | ---- | C] () -- C:\Users\Frank\Documents\FORM NEEDED ASAP signed.pdf
[2015/05/24 02:01:11 | 002,567,282 | ---- | C] () -- C:\Users\Frank\Documents\geyman docs.zip
[2015/05/24 02:01:11 | 000,922,393 | ---- | C] () -- C:\Users\Frank\Documents\GFE filled out.pdf
[2015/05/24 02:01:11 | 000,765,416 | ---- | C] () -- C:\Users\Frank\Documents\FormTyper.max
[2015/05/24 02:01:11 | 000,570,133 | ---- | C] () -- C:\Users\Frank\Documents\Freddie_Relief_Refi.pdf
[2015/05/24 02:01:11 | 000,368,538 | ---- | C] () -- C:\Users\Frank\Documents\Genworth team sheet.pdf
[2015/05/24 02:01:11 | 000,325,578 | ---- | C] () -- C:\Users\Frank\Documents\GFE fee guide.pdf
[2015/05/24 02:01:11 | 000,195,071 | ---- | C] () -- C:\Users\Frank\Documents\Florida Capital submission checklist.pdf
[2015/05/24 02:01:11 | 000,039,963 | ---- | C] () -- C:\Users\Frank\Documents\global e and o
[2015/05/24 02:01:11 | 000,028,119 | ---- | C] () -- C:\Users\Frank\Documents\Florida Office of Financial Regulation.pdf
[2015/05/24 02:01:11 | 000,027,323 | ---- | C] () -- C:\Users\Frank\Documents\frank swing analysis.pdf
[2015/05/24 02:01:11 | 000,025,114 | ---- | C] () -- C:\Users\Frank\Documents\GFE Fee Chart.pdf
[2015/05/24 02:01:11 | 000,015,305 | ---- | C] () -- C:\Users\Frank\Documents\Global wire instructions.pdf
[2015/05/24 02:01:10 | 001,005,925 | ---- | C] () -- C:\Users\Frank\Documents\FCL Life & Annuity Producer B rev0410.pdf
[2015/05/24 02:01:10 | 000,986,926 | ---- | C] () -- C:\Users\Frank\Documents\FCL Life & Annuity Producer B r.pdf
[2015/05/24 02:01:10 | 000,795,761 | ---- | C] () -- C:\Users\Frank\Documents\Flash.pdf
[2015/05/24 02:01:10 | 000,087,467 | ---- | C] () -- C:\Users\Frank\Documents\fha mip dropoff.pdf
[2015/05/24 02:01:10 | 000,060,223 | ---- | C] () -- C:\Users\Frank\Documents\FL Anti Coercion Disclosure.pdf
[2015/05/24 02:01:10 | 000,055,761 | ---- | C] () -- C:\Users\Frank\Documents\FELDMAN FOX & MORGADO---PA - Fort Lauderdale, FL Workers Compensation, Auto Accident, Medical Malpractice Lawyers.pdf
[2015/05/24 02:01:09 | 002,811,564 | ---- | C] () -- C:\Users\Frank\Documents\entire sink picture.JPG
[2015/05/24 02:01:09 | 002,767,598 | ---- | C] () -- C:\Users\Frank\Documents\entire sink.JPG
[2015/05/24 02:01:09 | 001,660,651 | ---- | C] () -- C:\Users\Frank\Documents\fax to dean.pdf
[2015/05/24 02:01:09 | 000,521,577 | ---- | C] () -- C:\Users\Frank\Documents\f4868.pdf
[2015/05/24 02:01:09 | 000,113,260 | ---- | C] () -- C:\Users\Frank\Documents\Facet Joint Injection-FAQs.pdf
[2015/05/24 02:01:09 | 000,018,605 | ---- | C] () -- C:\Users\Frank\Documents\eyeglass prescription.pdf
[2015/05/24 02:01:09 | 000,009,589 | ---- | C] () -- C:\Users\Frank\Documents\eoi.rtf
[2015/05/24 02:01:08 | 003,080,252 | R--- | C] () -- C:\Users\Frank\Documents\effron appraisal 2011.pdf
[2015/05/24 02:01:08 | 002,976,661 | ---- | C] () -- C:\Users\Frank\Documents\entire sink 2.JPG
[2015/05/24 02:01:08 | 001,224,752 | ---- | C] () -- C:\Users\Frank\Documents\effron docs.pdf
[2015/05/24 02:01:08 | 001,142,227 | ---- | C] () -- C:\Users\Frank\Documents\entire sink 3.JPG
[2015/05/24 02:01:08 | 000,630,870 | ---- | C] () -- C:\Users\Frank\Documents\email to matt.pdf
[2015/05/24 02:01:08 | 000,604,291 | ---- | C] () -- C:\Users\Frank\Documents\emily dave zip.jpg
[2015/05/24 02:01:08 | 000,413,773 | ---- | C] () -- C:\Users\Frank\Documents\economic calendar 102813.pdf
[2015/05/24 02:01:07 | 006,694,142 | ---- | C] () -- C:\Users\Frank\Documents\Doterra Product Guide.pdf
[2015/05/24 02:01:07 | 003,369,728 | ---- | C] () -- C:\Users\Frank\Documents\DSCN0052.JPG
[2015/05/24 02:01:07 | 001,099,331 | ---- | C] () -- C:\Users\Frank\Documents\du refi plus plaza.pdf
[2015/05/24 02:01:07 | 000,482,729 | ---- | C] () -- C:\Users\Frank\Documents\DOTERRA Supplement Info.pdf
[2015/05/24 02:01:07 | 000,181,785 | ---- | C] () -- C:\Users\Frank\Documents\Document.jpg
[2015/05/24 02:01:07 | 000,121,964 | ---- | C] () -- C:\Users\Frank\Documents\du refi plus guides.pdf
[2015/05/24 02:01:07 | 000,083,229 | ---- | C] () -- C:\Users\Frank\Documents\Document.pdf
[2015/05/24 02:01:06 | 008,147,153 | ---- | C] () -- C:\Users\Frank\Documents\Document (5).jpg
[2015/05/24 02:01:06 | 002,185,676 | ---- | C] () -- C:\Users\Frank\Documents\Document (3).pdf
[2015/05/24 02:01:06 | 001,494,715 | ---- | C] () -- C:\Users\Frank\Documents\Document (4).pdf
[2015/05/24 02:01:06 | 001,195,701 | ---- | C] () -- C:\Users\Frank\Documents\Document (4).jpg
[2015/05/24 02:01:06 | 000,099,563 | ---- | C] () -- C:\Users\Frank\Documents\Document (6).pdf
[2015/05/24 02:01:06 | 000,061,081 | ---- | C] () -- C:\Users\Frank\Documents\Document (5).pdf
[2015/05/24 02:01:05 | 005,974,852 | ---- | C] () -- C:\Users\Frank\Documents\Document (3).jpg
[2015/05/24 02:01:05 | 003,853,927 | ---- | C] () -- C:\Users\Frank\Documents\Copy of Document (4).jpg
[2015/05/24 02:01:05 | 002,672,683 | ---- | C] () -- C:\Users\Frank\Documents\derby guide.pdf
[2015/05/24 02:01:05 | 002,190,722 | ---- | C] () -- C:\Users\Frank\Documents\Current-Rate-Sheet.pdf
[2015/05/24 02:01:05 | 000,737,406 | ---- | C] () -- C:\Users\Frank\Documents\dipentima cr.pdf
[2015/05/24 02:01:05 | 000,722,465 | ---- | C] () -- C:\Users\Frank\Documents\Copy of Microsoft Word - Fan program 4.pdf
[2015/05/24 02:01:05 | 000,172,848 | ---- | C] () -- C:\Users\Frank\Documents\Document (2).jpg
[2015/05/24 02:01:05 | 000,099,563 | ---- | C] () -- C:\Users\Frank\Documents\Copy of Document (6).pdf
[2015/05/24 02:01:05 | 000,099,563 | ---- | C] () -- C:\Users\Frank\Documents\Copy of Document (6) (2).pdf
[2015/05/24 02:01:05 | 000,039,579 | ---- | C] () -- C:\Users\Frank\Documents\Document (2).pdf
[2015/05/24 02:01:05 | 000,020,493 | ---- | C] () -- C:\Users\Frank\Documents\Credit Inquiry letter SAMPLE.pdf
[2015/05/24 02:01:05 | 000,020,480 | ---- | C] () -- C:\Users\Frank\Documents\distribution template editable.dot
[2015/05/24 02:01:05 | 000,020,480 | ---- | C] () -- C:\Users\Frank\Documents\credit inquiry letter sample.dot
[2015/05/24 02:01:05 | 000,018,989 | ---- | C] () -- C:\Users\Frank\Documents\credit card authorization form.pdf
[2015/05/24 02:01:04 | 009,712,835 | ---- | C] () -- C:\Users\Frank\Documents\Copy 2 of Document (3).jpg
[2015/05/24 02:01:04 | 006,707,864 | ---- | C] () -- C:\Users\Frank\Documents\Copy of Document (3).jpg
[2015/05/24 02:01:04 | 006,276,493 | R--- | C] () -- C:\Users\Frank\Documents\closing package signed sample.pdf
[2015/05/24 02:01:04 | 002,361,719 | ---- | C] () -- C:\Users\Frank\Documents\Caliber FHA Guidelines.pdf
[2015/05/24 02:01:04 | 001,879,542 | ---- | C] () -- C:\Users\Frank\Documents\C__Documents and Settings_Frank_Local Settings_Temporary Internet Files_Content.IE5_UHTE72T8_2014628_Income[1].pdf
[2015/05/24 02:01:04 | 001,656,909 | ---- | C] () -- C:\Users\Frank\Documents\computer speed up.pdf
[2015/05/24 02:01:04 | 001,517,070 | ---- | C] () -- C:\Users\Frank\Documents\Caliber quick reference guide.pdf
[2015/05/24 02:01:04 | 001,303,778 | ---- | C] () -- C:\Users\Frank\Documents\connelly closing docs.pdf
[2015/05/24 02:01:04 | 001,223,315 | ---- | C] () -- C:\Users\Frank\Documents\Caliber fha submission check.pdf
[2015/05/24 02:01:04 | 000,566,340 | R--- | C] () -- C:\Users\Frank\Documents\Cashiers Check for closing.pdf
[2015/05/24 02:01:04 | 000,469,059 | ---- | C] () -- C:\Users\Frank\Documents\Caliber mortgagee clause.pdf
[2015/05/24 02:01:04 | 000,401,171 | ---- | C] () -- C:\Users\Frank\Documents\Caliber GFE review requirements.pdf
[2015/05/24 02:01:04 | 000,391,592 | ---- | C] () -- C:\Users\Frank\Documents\Caliber condo questionairre.pdf
[2015/05/24 02:01:04 | 000,254,792 | ---- | C] () -- C:\Users\Frank\Documents\Caliber appraisal order.pdf
[2015/05/24 02:01:04 | 000,254,280 | ---- | C] () -- C:\Users\Frank\Documents\CALL REPORT APRIL THRU JUNE.pdf
[2015/05/24 02:01:04 | 000,240,932 | ---- | C] () -- C:\Users\Frank\Documents\CALL REPORT JULY THRU SEPT 2011.pdf
[2015/05/24 02:01:04 | 000,237,413 | ---- | C] () -- C:\Users\Frank\Documents\condo questionairre.pdf
[2015/05/24 02:01:04 | 000,219,668 | ---- | C] () -- C:\Users\Frank\Documents\completed policy cancellation.pdf
[2015/05/24 02:01:04 | 000,186,755 | ---- | C] () -- C:\Users\Frank\Documents\COMMERCIAL QUOTE REQUEST.pdf
[2015/05/24 02:01:04 | 000,165,842 | ---- | C] () -- C:\Users\Frank\Documents\c2 comp matrix.pdf
[2015/05/24 02:01:04 | 000,147,154 | ---- | C] () -- C:\Users\Frank\Documents\condo questionairre wells.pdf
[2015/05/24 02:01:04 | 000,138,132 | ---- | C] () -- C:\Users\Frank\Documents\C2 Pre QC.pdf
[2015/05/24 02:01:04 | 000,080,548 | ---- | C] () -- C:\Users\Frank\Documents\Come Dancing Ballroom - Schedules.pdf
[2015/05/24 02:01:04 | 000,065,665 | ---- | C] () -- C:\Users\Frank\Documents\c2 consent email.pdf
[2015/05/24 02:01:04 | 000,044,839 | ---- | C] () -- C:\Users\Frank\Documents\commercial lender.pdf
[2015/05/24 02:01:04 | 000,040,372 | ---- | C] () -- C:\Users\Frank\Documents\Capture test.JPG
[2015/05/24 02:01:04 | 000,011,010 | ---- | C] () -- C:\Users\Frank\Documents\Chase Online - Confirmation.pdf
[2015/05/24 02:01:04 | 000,008,499 | R--- | C] () -- C:\Users\Frank\Documents\carlo employee list
[2015/05/24 02:01:04 | 000,008,281 | ---- | C] () -- C:\Users\Frank\Documents\Copy 3 of Page 1 (2).pdf
[2015/05/24 02:01:04 | 000,008,067 | ---- | C] () -- C:\Users\Frank\Documents\Chase Online - Credit Card Payment.pdf
[2015/05/24 02:01:03 | 005,338,308 | ---- | C] () -- C:\Users\Frank\Documents\BEL_06062014.pdf
[2015/05/24 02:01:03 | 004,813,353 | ---- | C] () -- C:\Users\Frank\Documents\BEL_06072014.pdf
[2015/05/24 02:01:03 | 002,452,012 | ---- | C] () -- C:\Users\Frank\Documents\bios manual.pdf
[2015/05/24 02:01:03 | 000,670,079 | ---- | C] () -- C:\Users\Frank\Documents\C__Documents and Settings_Frank_Local Settings_Temporary Internet Files_Content.IE5_0JMEMYQC_2014628_Originator_GFE[1].pdf
[2015/05/24 02:01:03 | 000,549,380 | ---- | C] () -- C:\Users\Frank\Documents\C__DOCUME~1_Frank_LOCALS~1_Temp_plugtmp-10_plugin-ViewApplication.aspx.pdf
[2015/05/24 02:01:03 | 000,549,172 | ---- | C] () -- C:\Users\Frank\Documents\C__Documents and Settings_Frank_Local Settings_Temporary Internet Files_Content.IE5_09M3K5IB_1003_2014628[1].pdf
[2015/05/24 02:01:03 | 000,363,534 | ---- | C] () -- C:\Users\Frank\Documents\anselmo appraisal.pdf
[2015/05/24 02:01:03 | 000,296,552 | ---- | C] () -- C:\Users\Frank\Documents\C__Documents and Settings_Frank_Local Settings_Temporary Internet Files_Content.IE5_4PEZ85UV_2014628_Assets[1].pdf
[2015/05/24 02:01:03 | 000,273,457 | ---- | C] () -- C:\Users\Frank\Documents\APR fees.pdf
[2015/05/24 02:01:03 | 000,260,558 | ---- | C] () -- C:\Users\Frank\Documents\bcbs summary benefits.pdf
[2015/05/24 02:01:03 | 000,248,283 | ---- | C] () -- C:\Users\Frank\Documents\annuity bashing.pdf
[2015/05/24 02:01:03 | 000,238,413 | ---- | C] () -- C:\Users\Frank\Documents\bisson john good faith guarantee.pdf
[2015/05/24 02:01:03 | 000,198,230 | ---- | C] () -- C:\Users\Frank\Documents\Bank of America sample statement.pdf
[2015/05/24 02:01:03 | 000,178,444 | ---- | C] () -- C:\Users\Frank\Documents\appraisal appeal form.pdf
[2015/05/24 02:01:03 | 000,148,559 | ---- | C] () -- C:\Users\Frank\Documents\brino cr.pdf
[2015/05/24 02:01:03 | 000,147,033 | ---- | C] () -- C:\Users\Frank\Documents\borrower authorization.pdf
[2015/05/24 02:01:03 | 000,134,536 | ---- | C] () -- C:\Users\Frank\Documents\amended 1040 return.pdf
[2015/05/24 02:01:03 | 000,118,579 | ---- | C] () -- C:\Users\Frank\Documents\andrews cost breakdown.pdf
[2015/05/24 02:01:03 | 000,099,868 | ---- | C] () -- C:\Users\Frank\Documents\blood results.pdf
[2015/05/24 02:01:03 | 000,096,654 | ---- | C] () -- C:\Users\Frank\Documents\Buy Mazda Mpv Van Automatic Transmission (2002 - 2004, 5 Speed Automatic Transmission, Remanufactured_Rebuilt).pdf
[2015/05/24 02:01:03 | 000,074,739 | ---- | C] () -- C:\Users\Frank\Documents\C__Documents and Settings_Frank_Local Settings_Temporary Internet Files_Content.IE5_ADSNQLS9_show1008[1].pdf
[2015/05/24 02:01:03 | 000,067,713 | ---- | C] () -- C:\Users\Frank\Documents\bad realtors.pdf
[2015/05/24 02:01:03 | 000,063,381 | ---- | C] () -- C:\Users\Frank\Documents\best rate fha list.csv
[2015/05/24 02:01:03 | 000,062,593 | ---- | C] () -- C:\Users\Frank\Documents\best rate fha list edit.csv
[2015/05/24 02:01:03 | 000,061,311 | ---- | C] () -- C:\Users\Frank\Documents\bank receipt sample.pdf
[2015/05/24 02:01:03 | 000,061,011 | ---- | C] () -- C:\Users\Frank\Documents\Best rate leads.csv
[2015/05/24 02:01:03 | 000,048,029 | ---- | C] () -- C:\Users\Frank\Documents\C__Documents and Settings_Frank_Local Settings_Temporary Internet Files_Content.IE5_6VW6YQR7_show1008[1].pdf
[2015/05/24 02:01:03 | 000,045,764 | R--- | C] () -- C:\Users\Frank\Documents\asap notary e & o
[2015/05/24 02:01:03 | 000,040,529 | ---- | C] () -- C:\Users\Frank\Documents\broker_fee_agreement.pdf
[2015/05/24 02:01:03 | 000,036,519 | ---- | C] () -- C:\Users\Frank\Documents\C__DOCUME~1_Frank_LOCALS~1_Temp_plugtmp-13_plugin-CreateCoverSheets-1.aspx.pdf
[2015/05/24 02:01:03 | 000,033,623 | ---- | C] () -- C:\Users\Frank\Documents\battis prequal.pdf
[2015/05/24 02:01:03 | 000,027,823 | ---- | C] () -- C:\Users\Frank\Documents\attached PUD questionairre.pdf
[2015/05/24 02:01:03 | 000,010,782 | ---- | C] () -- C:\Users\Frank\Documents\ATM_letter.rtf
[2015/05/24 02:01:02 | 004,643,921 | ---- | C] () -- C:\Users\Frank\Documents\2013 Corporate return (8).pdf
[2015/05/24 02:01:02 | 001,509,836 | ---- | C] () -- C:\Users\Frank\Documents\12819 Shadow Run Blvd, Riverview, FL 33569 to 715 W Waters Ave, Tampa, FL 33604.pdf
[2015/05/24 02:01:02 | 001,488,404 | ---- | C] () -- C:\Users\Frank\Documents\4506t help.pdf
[2015/05/24 02:01:02 | 000,689,229 | ---- | C] () -- C:\Users\Frank\Documents\Addendum.pdf
[2015/05/24 02:01:02 | 000,322,719 | ---- | C] () -- C:\Users\Frank\Documents\12819 Shadow Run Blvd, Riverview, FL 33569 to 302 N Michigan Ave # 12, Plant City, FL 33563-3459 - Google Maps.pdf
[2015/05/24 02:01:02 | 000,243,569 | ---- | C] () -- C:\Users\Frank\Documents\2012 calendar.pdf
[2015/05/24 02:01:02 | 000,172,068 | ---- | C] () -- C:\Users\Frank\Documents\20111013132911793.pdf
[2015/05/24 02:01:02 | 000,152,438 | ---- | C] () -- C:\Users\Frank\Documents\208148737210.pdf
[2015/05/24 02:01:02 | 000,105,971 | ---- | C] () -- C:\Users\Frank\Documents\12819 Shadow Run Blvd, Riverview, FL 33569 to 302 N Michigan Ave # 12, Plant City, FL 33563-3459 - Google Maps (2).pdf
[2015/05/24 02:01:02 | 000,099,337 | ---- | C] () -- C:\Users\Frank\Documents\2014 CALENDAR.pdf
[2015/05/24 02:01:02 | 000,095,151 | ---- | C] () -- C:\Users\Frank\Documents\20110405101117704.pdf
[2015/05/24 02:01:02 | 000,077,389 | ---- | C] () -- C:\Users\Frank\Documents\12819 Shadow Run Blvd, Rivervie.pdf
[2015/05/24 02:01:02 | 000,069,463 | ---- | C] () -- C:\Users\Frank\Documents\208158621126 (2).pdf
[2015/05/24 02:01:02 | 000,062,625 | ---- | C] () -- C:\Users\Frank\Documents\2015 CALENDAR.pdf
[2015/05/24 02:01:02 | 000,059,169 | ---- | C] () -- C:\Users\Frank\Documents\208189058619.pdf
[2015/05/24 02:01:02 | 000,057,143 | ---- | C] () -- C:\Users\Frank\Documents\208158621126 (2) (3).pdf
[2015/05/24 02:01:02 | 000,053,401 | ---- | C] () -- C:\Users\Frank\Documents\2013 calendar.pdf
[2015/05/24 02:01:02 | 000,052,851 | ---- | C] () -- C:\Users\Frank\Documents\208158621126 (2) (2).pdf
[2015/05/24 02:01:02 | 000,042,689 | ---- | C] () -- C:\Users\Frank\Documents\208191211673.pdf
[2015/05/24 02:01:02 | 000,040,994 | ---- | C] () -- C:\Users\Frank\Documents\10.MDI
[2015/05/24 02:01:02 | 000,033,657 | ---- | C] () -- C:\Users\Frank\Documents\adcock prequal.pdf
[2015/05/24 02:01:02 | 000,011,640 | -H-- | C] () -- C:\Users\Frank\Documents\.ppinfocache
[2015/05/23 23:50:39 | 000,003,584 | ---- | C] () -- C:\Users\Frank\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2015/05/19 17:42:46 | 000,001,032 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MultiMon Taskbar.lnk
[2015/05/19 09:45:48 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_point64_01011.Wdf
[2015/05/19 09:45:40 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_NuidFltr_01011.Wdf
[2015/05/19 09:44:21 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_dc3d_01011.Wdf
[2015/05/19 09:41:21 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_dc3d_01009.Wdf
[2015/05/19 09:40:37 | 000,016,303 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2015/05/19 09:40:36 | 000,016,303 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2015/05/16 21:11:23 | 000,002,279 | ---- | C] () -- C:\Users\Frank\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2015/05/16 21:10:58 | 000,000,898 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2015/05/16 21:10:57 | 000,000,894 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015/05/16 14:07:43 | 000,152,896 | R--- | C] () -- C:\Windows\Wiainst64.exe
[2015/05/16 14:07:39 | 000,365,568 | ---- | C] () -- C:\Windows\SysNative\SaMinDrv.dll
[2015/05/16 14:07:39 | 000,112,128 | ---- | C] () -- C:\Windows\SysNative\SaImgFlt.dll
[2015/05/16 14:07:39 | 000,055,296 | ---- | C] () -- C:\Windows\SysNative\SaErHdlr.dll
[2015/05/16 14:07:23 | 000,000,273 | ---- | C] () -- C:\Windows\SysNative\eed_sl.exe.config
[2015/05/16 14:07:21 | 000,226,424 | ---- | C] () -- C:\Windows\SysNative\SBuySupplies.exe
[2015/05/16 14:07:21 | 000,000,359 | ---- | C] () -- C:\Windows\SysNative\ssa7mlm.smt
[2015/05/16 14:07:18 | 000,029,184 | ---- | C] () -- C:\Windows\SysNative\ssa7mlm.dll
[2015/05/16 14:07:17 | 003,141,120 | ---- | C] () -- C:\Windows\SysNative\eed_ec.dll
[2015/05/16 14:07:13 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\Ssusbpn.dll
[2015/05/16 14:07:13 | 000,049,152 | ---- | C] () -- C:\Windows\SysNative\Ssusbp64.dll
[2015/05/16 09:27:39 | 000,000,033 | ---- | C] () -- C:\Windows\dsi.ini
[2015/05/16 09:27:34 | 000,019,968 | ---- | C] () -- C:\Windows\System\encodr32.dll
[2015/05/16 08:49:28 | 000,019,968 | ---- | C] () -- C:\Windows\SysWow64\encodr32.dll
[2015/05/16 02:25:10 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
[2015/05/16 00:56:38 | 000,272,248 | ---- | C] () -- C:\Windows\SysNative\drivers\aswVmm.sys
[2015/05/16 00:56:37 | 000,065,736 | ---- | C] () -- C:\Windows\SysNative\drivers\aswRvrt.sys
[2015/05/16 00:56:36 | 000,029,168 | ---- | C] () -- C:\Windows\SysNative\drivers\aswHwid.sys
[2015/05/15 17:59:48 | 000,002,072 | ---- | C] () -- C:\Users\Public\Desktop\PaperPort.lnk
[2015/05/15 16:22:38 | 000,000,058 | ---- | C] () -- C:\Windows\mchguid.ini
[2015/05/15 16:22:38 | 000,000,058 | ---- | C] () -- C:\ProgramData\mchguid.ini
[2015/05/15 16:22:12 | 000,000,720 | ---- | C] () -- C:\Windows\winpoint.ini
[2015/05/15 16:21:55 | 000,001,590 | ---- | C] () -- C:\Users\Public\Desktop\Point.lnk
[2015/05/15 15:23:29 | 000,001,133 | ---- | C] () -- C:\Users\Frank\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk
[2015/05/15 13:20:02 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2015/05/15 13:18:42 | 3220,676,608 | -HS- | C] () -- C:\hiberfil.sys
[2015/05/15 13:17:10 | 000,002,693 | ---- | C] () -- C:\Users\Frank\Desktop\Microsoft Office Word 2007.lnk
[2015/05/15 10:53:59 | 000,001,159 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2015/05/15 10:53:57 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2015/05/15 10:42:06 | 004,229,086 | ---- | C] () -- C:\Windows\SysNative\nvcoproc.bin
[2015/05/15 10:41:39 | 000,074,272 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll
[2015/05/15 10:41:12 | 000,026,155 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
[2015/05/15 10:35:43 | 000,001,407 | ---- | C] () -- C:\Users\Frank\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2015/05/15 10:33:16 | 000,000,169 | ---- | C] () -- C:\Windows\setup.iss
[2015/05/15 10:25:06 | 000,001,413 | ---- | C] () -- C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2015/05/15 10:24:50 | 000,000,290 | ---- | C] () -- C:\Users\Frank\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2015/05/15 10:24:50 | 000,000,272 | ---- | C] () -- C:\Users\Frank\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2015/04/19 08:20:16 | 000,005,872 | ---- | C] () -- C:\Users\Frank\AppData\Roaming\XoyhysuL0j1cPby
[2015/03/03 05:42:16 | 000,773,536 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2014/07/25 00:36:40 | 000,094,208 | ---- | C] () -- C:\Windows\SysWow64\ssdevm.dll

========== ZeroAccess Check ==========

[2009/07/14 00:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2015/02/13 01:22:33 | 014,177,280 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2015/02/13 01:26:18 | 012,875,264 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 21:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 23:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 21:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2015/05/20 19:46:08 | 000,000,000 | ---D | M] -- C:\Users\Frank\AppData\Roaming\.oit
[2015/05/16 00:57:49 | 000,000,000 | ---D | M] -- C:\Users\Frank\AppData\Roaming\AVAST Software
[2015/05/15 16:22:37 | 000,000,000 | ---D | M] -- C:\Users\Frank\AppData\Roaming\Calyx Software
[2015/05/15 21:14:37 | 000,000,000 | ---D | M] -- C:\Users\Frank\AppData\Roaming\Nuance
[2015/05/16 14:08:03 | 000,000,000 | ---D | M] -- C:\Users\Frank\AppData\Roaming\Samsung
[2015/05/15 17:59:58 | 000,000,000 | ---D | M] -- C:\Users\Frank\AppData\Roaming\Zeon

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:FD9CE1F3

< End of report >
 
Not sure how the malwarebytes log got all screwed up, not even gonna attempt to read it.

Rerun OTL but this time copy and paste the following into the custom scans/fixes box at the bottom and click on run fix up top.

Code: 
:OTL
@Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:FD9CE1F3

What keyboard do you have?
 
I opened OTL and followed your instructions and this is what I got:

========== OTL ==========
ADS C:\ProgramData\TEMP:FD9CE1F3 deleted successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 05252015_162655

My keyboard is "microsoft wireless comfort keyboard 4000" (model 1045).
 
I got this message: setup can not continue because a later version of this software is installed.

With the current installed version the "my favorites buttons" do not work.

John: I am not getting that weird pop up anymore so I guess running those 4 programs did the trick. Does that mean that I don't have to do Malwarebytes again even though the log got screwed up.
 
Last edited by a moderator:
No, you don't need to do malwarebytes again. Do you really need to push a button to access your favorites when you can do it with the mouse? Other than that, it seems you may need a new keyboard??? Could the button be bad? What about all the other buttons, do they work?
 
You must log in or register to reply here.
Back
Top