Virus?

[crescere]

c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\content.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\g82.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\iUfu2AfqyQ.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\newtab.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\newtab.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\NZFe.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\yrdPIZPB.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\pttOfQa9g.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\JDu.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\manifest.json
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\background.html
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\content.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\g82.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\lsdb.js
c:\users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\iUfu2AfqyQ.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\NZFe.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\yrdPIZPB.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\pttOfQa9g.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\JDu.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\g82.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\iUfu2AfqyQ.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\NZFe.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\yrdPIZPB.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\pttOfQa9g.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\JDu.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\g82.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\iUfu2AfqyQ.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\newtab.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\NZFe.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\yrdPIZPB.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\pttOfQa9g.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\JDu.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\g82.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\manifest.json
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\background.html
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\content.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\iUfu2AfqyQ.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\lsdb.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\manifest.json
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\newtab.html
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\background.html
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\content.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\lsdb.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\manifest.json

 

[crescere]

c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\newtab.html
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\NZFe.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\background.html
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\content.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\lsdb.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\manifest.json
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\yrdPIZPB.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\background.html
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\content.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\lsdb.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\manifest.json
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\pttOfQa9g.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\background.html
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\content.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\JDu.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\lsdb.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\manifest.json
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\background.html
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\content.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\g82.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\lsdb.js
c:\users\Mozart\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\manifest.json
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\background.html
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\content.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\iUfu2AfqyQ.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\lsdb.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\manifest.json
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\newtab.html
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\background.html
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\content.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\lsdb.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\manifest.json
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\newtab.html
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\NZFe.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\background.html
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\content.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\lsdb.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\manifest.json
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\yrdPIZPB.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\background.html
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\content.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\lsdb.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\manifest.json
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\pttOfQa9g.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\background.html
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\content.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\JDu.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\lsdb.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\manifest.json
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\background.html
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\content.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\g82.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\lsdb.js
c:\users\Mozart\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\manifest.json
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\background.html
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\content.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\iUfu2AfqyQ.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\lsdb.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\manifest.json
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\bimoonjkmiaalcionbiiemaggagjmckf\2.1\newtab.html
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\background.html
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\content.js

 

[crescere]

c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\lsdb.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\manifest.json
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\newtab.html
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\glhapmgafgmcepnbbhfhpaojdogoigke\2.1\NZFe.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\background.html
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\content.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\lsdb.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\manifest.json
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifehnnhfecfcfdpeblfbaaepfgjogio\3.9\yrdPIZPB.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\background.html
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\content.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\lsdb.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\manifest.json
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\idlbefkkkkhimbhleibchoamgfoelppc\1.0\pttOfQa9g.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\background.html
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\content.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\JDu.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\lsdb.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\iobcbdgacfkninlcbphihhdlkobkehia\191\manifest.json
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\background.html
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\content.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\g82.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\lsdb.js
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbadejhaegijabjiapndagmpeibabfog\1.0\manifest.json
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bimoonjkmiaalcionbiiemaggagjmckf_0.localstorage-journal
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bimoonjkmiaalcionbiiemaggagjmckf_0.localstorage
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_glhapmgafgmcepnbbhfhpaojdogoigke_0.localstorage-journal
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_glhapmgafgmcepnbbhfhpaojdogoigke_0.localstorage
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hcmlbbhgdheinnjgogiogmnadbbooblj_0.localstorage-journal
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hcmlbbhgdheinnjgogiogmnadbbooblj_0.localstorage
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_iobcbdgacfkninlcbphihhdlkobkehia_0.localstorage-journal
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_iobcbdgacfkninlcbphihhdlkobkehia_0.localstorage
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mjdhepakoplllaiollfmpmoplpkhaaec_0.localstorage-journal
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mjdhepakoplllaiollfmpmoplpkhaaec_0.localstorage
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_podidoepcoaefdoommioffajfppginlf_0.localstorage-journal
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_podidoepcoaefdoommioffajfppginlf_0.localstorage
c:\users\Mozart\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\bootstrap.js
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\chrome.manifest
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\content\bg.js
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\install.rdf
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\bootstrap.js
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\chrome.manifest
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\content\bg.js
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\install.rdf
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\bootstrap.js
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\chrome.manifest
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\content\bg.js
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\install.rdf
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\bootstrap.js
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\chrome.manifest
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\content\bg.js
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\install.rdf
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\bootstrap.js
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\chrome.manifest
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\content\bg.js
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\install.rdf
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\bootstrap.js
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\chrome.manifest
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\content\bg.js
c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\extensions\[email protected]\install.rdf
c:\users\Mozart\AppData\Roaming\vso_ts_preview.xml
c:\users\Mozart\GoToAssistDownloadHelper.exe
c:\windows\wininit.ini

 

[crescere]

((((((((((((((((((((((((( Files Created from 2014-07-04 to 2014-08-04 )))))))))))))))))))))))))))))))
.
.
2014-08-04 04:31 . 2014-08-04 04:31 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-08-03 15:55 . 2014-05-14 16:23 44512 ----a-w- c:\windows\system32\wups2.dll
2014-08-03 15:55 . 2014-05-14 16:23 58336 ----a-w- c:\windows\system32\wuauclt.exe
2014-08-03 15:55 . 2014-05-14 16:23 2477536 ----a-w- c:\windows\system32\wuaueng.dll
2014-08-03 15:55 . 2014-05-14 16:21 2620928 ----a-w- c:\windows\system32\wucltux.dll
2014-08-03 15:54 . 2014-05-14 13:23 198600 ----a-w- c:\windows\system32\wuwebv.dll
2014-08-03 15:54 . 2014-05-14 13:23 179656 ----a-w- c:\windows\SysWow64\wuwebv.dll
2014-08-03 15:54 . 2014-05-14 13:20 36864 ----a-w- c:\windows\system32\wuapp.exe
2014-08-03 15:54 . 2014-05-14 13:17 33792 ----a-w- c:\windows\SysWow64\wuapp.exe
2014-08-02 03:29 . 2014-08-02 03:29 -------- d-----w- c:\windows\ERUNT
2014-08-02 03:22 . 2010-08-30 12:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll
2014-08-02 03:21 . 2014-08-02 03:23 -------- d-----w- C:\AdwCleaner
2014-08-01 15:00 . 2014-08-02 19:54 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{77659264-C434-4E42-BFE4-F1C4BA80C863}\offreg.dll
2014-08-01 09:37 . 2014-07-02 03:09 10924376 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{77659264-C434-4E42-BFE4-F1C4BA80C863}\mpengine.dll
2014-07-30 16:11 . 2014-08-03 14:34 122584 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-07-30 16:11 . 2014-05-12 11:26 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-07-30 16:11 . 2014-05-12 11:26 91352 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-07-30 16:11 . 2014-07-30 16:11 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-07-30 16:09 . 2014-07-30 16:11 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2014-07-30 16:09 . 2014-05-12 11:25 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-07-30 13:45 . 2014-08-01 14:47 -------- d-----w- c:\program files\Calibre2
2014-07-29 14:53 . 2014-07-29 15:02 -------- d-----w- c:\program files (x86)\PC_Booster
2014-07-29 14:48 . 2014-07-29 14:54 -------- d-----w- c:\programdata\4c28b92d3fe95ecd
2014-07-29 14:48 . 2014-07-29 14:48 -------- d-----w- c:\users\Mozart\AppData\Local\Packages
2014-07-29 14:48 . 2014-07-29 14:48 -------- d-----w- c:\users\Mozart\AppData\Local\Comodo
2014-07-29 14:48 . 2014-07-29 14:48 -------- d-----w- c:\users\HomeGroupUser$
2014-07-29 14:48 . 2014-07-29 14:48 -------- d-----w- c:\users\Guest
2014-07-29 14:48 . 2014-07-29 14:48 -------- d-----w- c:\users\Administrator
2014-07-24 08:47 . 2014-07-24 08:47 -------- d-----w- c:\users\Default\AppData\Roaming\Garmin
2014-07-10 01:50 . 2014-07-10 02:50 11204096 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2014-07-10 00:48 . 2014-05-28 10:18 1188864 ----a-w- c:\windows\system32\wininet.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-10 07:02 . 2012-02-13 21:12 96441528 ----a-w- c:\windows\system32\MRT.exe
2014-07-10 02:50 . 2012-04-05 12:30 699056 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-07-10 02:50 . 2012-02-09 06:13 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Carbonite.Green]
@="{95A27763-F62A-4114-9072-E81D87DE3B68}"
[HKEY_CLASSES_ROOT\CLSID\{95A27763-F62A-4114-9072-E81D87DE3B68}]
2014-06-27 18:27 1020624 ----a-r- c:\program files (x86)\Carbonite\Carbonite Backup\CarboniteNSE.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Carbonite.Partial]
@="{E300CD91-100F-4E67-9AF3-1384A6124015}"
[HKEY_CLASSES_ROOT\CLSID\{E300CD91-100F-4E67-9AF3-1384A6124015}]
2014-06-27 18:27 1020624 ----a-r- c:\program files (x86)\Carbonite\Carbonite Backup\CarboniteNSE.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Carbonite.Yellow]
@="{5E529433-B50E-4bef-A63B-16A6B71B071A}"
[HKEY_CLASSES_ROOT\CLSID\{5E529433-B50E-4bef-A63B-16A6B71B071A}]
2014-06-27 18:27 1020624 ----a-r- c:\program files (x86)\Carbonite\Carbonite Backup\CarboniteNSE.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Privacy Suite RiskMonitor"="c:\program files (x86)\CyberScrub Privacy Suite\Launch.exe" [2008-07-29 45192]
"Amazon Cloud Player"="c:\users\Mozart\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe" [2014-03-07 3168576]
"GarminExpressTrayApp"="c:\program files (x86)\Garmin\Express Tray\ExpressTray.exe" [2014-07-01 122200]
"uTorrent"="c:\users\Mozart\AppData\Roaming\uTorrent\uTorrent.exe" [2014-07-16 1329744]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-11-06 283160]
"Intuit SyncManager"="c:\program files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe" [2013-11-08 2829624]
"Carbonite Backup"="c:\program files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe" [2014-06-27 1056976]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"GarminExpressTrayApp"="c:\program files (x86)\Garmin\Express Tray\ExpressTray.exe" [2014-07-01 122200]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoDevMgrUpdate"= 0 (0x0)
"NoDFSTab"= 0 (0x0)
"NoEncryptOnMove"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoStartMenuSubFolders"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDevMgrUpdate"= 0 (0x0)
"NoDFSTab"= 0 (0x0)
"NoEncryptOnMove"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoStartMenuSubFolders"= 0 (0x0)
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"DisableLocalMachineRun"= 0 (0x0)
"DisableLocalMachineRunOnce"= 0 (0x0)
"DisableCurrentUserRun"= 0 (0x0)
"DisableCurrentUserRunOnce"= 0 (0x0)
"NoFile"= 0 (0x0)
"HideClock"= 0 (0x0)
"NoDevMgrUpdate"= 0 (0x0)
"NoDFSTab"= 0 (0x0)
"NoEncryptOnMove"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoStartMenuSubFolders"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"RequireSignedAppInit_DLLs"=0 (0x0)
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 Backup Client Agent Service;Backup Client Agent Service;c:\program files (x86)\NovaStor\NovaStor NovaBACKUP\ManagementServer.Agent.Service.exe;c:\program files (x86)\NovaStor\NovaStor NovaBACKUP\ManagementServer.Agent.Service.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 nettalkd;NetTalk Service;c:\windows\system32\DRIVERS\nettalkd.sys;c:\windows\SYSNATIVE\DRIVERS\nettalkd.sys [x]
R3 NetTalkUsrService;NetTalkUsrService;c:\program files (x86)\NetTalk\nettalkd.exe;c:\program files (x86)\NetTalk\nettalkd.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 usbrndis6;USB RNDIS6 Adapter;c:\windows\system32\drivers\usb80236.sys;c:\windows\SYSNATIVE\drivers\usb80236.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [x]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [x]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [x]
S2 Disaster Recovery Imaging;Disaster Recovery Imaging;c:\program files (x86)\NovaStor\NovaStor NovaBACKUP\DR\x64\drdiag.exe;c:\program files (x86)\NovaStor\NovaStor NovaBACKUP\DR\x64\drdiag.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 Garmin Core Update Service;Garmin Core Update Service;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 IntuitUpdateServiceV4;Intuit Update Service v4;c:\program files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe;c:\program files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
S2 McciCMService64;McciCMService64;c:\program files\Common Files\Motive\McciCMService.exe;c:\program files\Common Files\Motive\McciCMService.exe [x]
S2 NetTalkUsrLaunchService;NetTalkUsrLaunchService;c:\program files (x86)\NetTalk\nettalkl.exe;c:\program files (x86)\NetTalk\nettalkl.exe [x]
S2 nsService;NovaStor NovaBACKUP Backup/Copy Engine;c:\program files (x86)\NovaStor\NovaStor NovaBACKUP\nsService.exe;c:\program files (x86)\NovaStor\NovaStor NovaBACKUP\nsService.exe [x]
S2 QBVSS;QBIDPService;c:\program files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe;c:\program files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 nettalkdMP;nettalkdMP;c:\windows\system32\DRIVERS\nettalkd.sys;c:\windows\SYSNATIVE\DRIVERS\nettalkd.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - 08460383
*NewlyCreated* - MBAMSWISSARMY
*Deregistered* - 08460383
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-08-02 17:06 1104200 ----a-w- c:\program files (x86)\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-08-04 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 02:50]
.
2014-07-29 c:\windows\Tasks\EasyShare Registration Task.job
- c:\windows\system32\rundll32.exe [2009-07-13 01:14]
.
2014-08-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-08-02 17:04]
.
2014-08-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-08-02 17:04]
.
2014-08-02 c:\windows\Tasks\PGAutoUpdate.job
- c:\program files (x86)\PC Tools\PC Tools Privacy Guardian\SULauncher.exe [2013-04-16 21:23]
.
2014-08-04 c:\windows\Tasks\PGSchedule.job
- c:\program files (x86)\PC Tools\PC Tools Privacy Guardian\pg.exe [2013-04-16 21:23]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Carbonite.Green]
@="{95A27763-F62A-4114-9072-E81D87DE3B68}"
[HKEY_CLASSES_ROOT\CLSID\{95A27763-F62A-4114-9072-E81D87DE3B68}]
2014-06-27 18:15 1293520 ----a-r- c:\program files\Carbonite\Carbonite Backup\CarboniteNSE.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Carbonite.Partial]
@="{E300CD91-100F-4E67-9AF3-1384A6124015}"
[HKEY_CLASSES_ROOT\CLSID\{E300CD91-100F-4E67-9AF3-1384A6124015}]
2014-06-27 18:15 1293520 ----a-r- c:\program files\Carbonite\Carbonite Backup\CarboniteNSE.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Carbonite.Yellow]
@="{5E529433-B50E-4bef-A63B-16A6B71B071A}"
[HKEY_CLASSES_ROOT\CLSID\{5E529433-B50E-4bef-A63B-16A6B71B071A}]
2014-06-27 18:15 1293520 ----a-r- c:\program files\Carbonite\Carbonite Backup\CarboniteNSE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-25 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-25 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-25 417304]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-02-25 10806816]
"WrtMon.exe"="c:\windows\system32\spool\drivers\x64\3\WrtMon.exe" [2006-09-20 20480]
"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-15 644696]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-04 1840720]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2014-02-24 5581888]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = www.google.com
mStart Page = www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
IE: Append Link Target to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
Trusted Zone: cleverreach.com\novastor
Trusted Zone: google-analytics.com
Trusted Zone: novastor.com
TCP: DhcpNameServer = 192.168.0.1 68.94.156.1 192.168.1.1
FF - ProfilePath - c:\users\Mozart\AppData\Roaming\Mozilla\Firefox\Profiles\ldnv72dy.default\
FF - ExtSQL: !HIDDEN! 2012-12-26 15:23; 4nffxtbr@ConservativeTalkNow_4n.com; c:\program files (x86)\ConservativeTalkNow_4n\bar

 

[crescere]

------ File Associations -------
.
inifile=%SystemRoot%\SysWow64\NOTEPAD.EXE %1
JSEFile="%SystemRoot%\System32\WScript.exe" "%1" %*
txtfile=%SystemRoot%\SysWow64\NOTEPAD.EXE %1
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
Toolbar-10 - (no file)
Wow6432Node-HKCU-Run-VueMinder - c:\program files (x86)\VueSoft\VueMinder\VueMinder.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-OneTab - c:\users\Mozart\AppData\Roaming\OneTab\uninstall.exe
AddRemove-{B945F928-45A2-231E-495F-38C40CA198E9} - c:\programdata\PrrIceChop\3m.exe
AddRemove-{F7FFE175-E3D6-2E86-0226-1D3AE4905E40} - c:\programdata\SaveeMassS\NamN7WyY.exe
AddRemove-{FDB962F0-B5B8-9460-D12F-7966E97BAA43} - c:\programdata\pricechoup\iY6Y19o.exe
AddRemove-Havka FOkm - c:\windows\system32\javaws.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.14"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2014-08-04 00:35:31
ComboFix-quarantined-files.txt 2014-08-04 04:35
ComboFix2.txt 2012-07-09 03:44
.
Pre-Run: 1,155,726,991,360 bytes free
Post-Run: 1,155,418,218,496 bytes free
.
- - End Of File - - 069D2C7E8A6DE9F32A6155C8C57A998A

 

[johnb35]

Looks like you had some bad chrome extensions installed. Also could have been an issue comodo dragon. Also some extensions in Firefox was deleted as well.

 

[crescere]

Thanks again for your help. I did not know what to do. How do you know these things?

 

[voyagerfan99]

Thanks again for your help. I did not know what to do. How do you know these things?

There are forums that provide virus removal training.