Buy Malwarebytes antimalware











This site is hosted at Hostgator.com




Sponsored Adverts

Sponsored Ads

These adverts come direct from Google adsense



Recent Posts

Pages: 1 2 [3] 4 5 6 7 8 ... 10
21
Uploads / Files for dvk01
« Last post by GalahadHelps on September 11, 2014, 09:17:04 »
Hi this is GalahadHelps. Derek requested the [38]-Submit_2008-01-17@17.50.zip  files for my virus help, located here: http://forums.techguy.org/virus-other-malware-removal/1133258-not-sure-what-do-virus.html#post8965712

22
Malware removal and help / Re: Running very slow and other issues
« Last post by Davejj on September 07, 2014, 12:18:58 »
Uninstalled Regservo

I think I have uninstalled the last of bitdefender, there was many options of products... I think mine was the free trial.

dll error message has now gone :)

I will give things a run for a while and see how I go... I think this machine is about 5/6 years old now? so still maybe time to start looking for somethig new.

Thanks again Derek
23
Malware removal and help / Re: Running very slow and other issues
« Last post by Derek on September 07, 2014, 11:59:47 »
if you are still getting the start up error then
download autoruns from http://technet.microsoft.com/en-gb/sysinternals/bb963902.aspx
unzip it to a folder on desktop or your downloads folder
click on autoruns.exe & it will display a window with a list of start up entries
select file/save . then in the save window select the bottom box where it says " save as type" and select txt in the drop down.
upload that txt file here so I can see ( hopefully) where it is being called from
24
Malware removal and help / Re: Running very slow and other issues
« Last post by Derek on September 07, 2014, 11:53:15 »
uninstall regservo
it looks like you might have a few bits of bitdefender still running there
try their uninstaller
http://www.bitdefender.com/uninstall/

are you still getting the start up error at boot
25
Malware removal and help / Re: Running very slow and other issues
« Last post by Davejj on September 07, 2014, 11:15:46 »
Hi Derek,

From your last fix I had always run Kaspersky but after a couple of years it really started giving me problems. I then went to webroot which has been fine, I just renewed for the 3rd time a couple of weeks back.

I only use IE although I do have Firefox loaded... would it be worth trying chrome?

Combofix to a while to run...here is the log.

ComboFix 14-09-05.01 - Dave 07/09/2014  10:28:48.1.2 - x86
Running from: c:\users\Dave\Desktop\ComboFix.exe
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Dave\AppData\Roaming\Local
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\af_ZA\af_ZA.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\af_ZA\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ar_EG\ar_EG.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ar_EG\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ar_SA\ar_SA.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ar_SA\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\az_AZ\az_AZ.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\az_AZ\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\be_BY\be_BY.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\be_BY\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\bg_BG\bg_BG.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\bg_BG\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\bn_BD\bn_BD.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\bn_BD\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\bs_BA\bs_BA.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\bs_BA\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ca_ES\ca_ES.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ca_ES\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\cs_CZ\cs_CZ.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\cs_CZ\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\da_DK\da_DK.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\da_DK\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\de_DE\de_DE.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\de_DE\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\de_DE\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\de_DE\wxstd.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\el_GR\el_GR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\el_GR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\en_AU\en_AU.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\en_AU\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\en_GB\en_GB.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\en_GB\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\en_US\en_US.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\en_US\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\eo_US\eo_US.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\eo_US\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\es_ES\es_ES.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\es_ES\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\es_MX\es_MX.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\es_MX\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\et_EE\et_EE.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\et_EE\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\fa_IR\fa_IR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\fa_IR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\fa_IR\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\fi_FI\fi_FI.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\fi_FI\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\fr_CA\fr_CA.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\fr_CA\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\fr_FR\fr_FR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\fr_FR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\fr_FR\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ga_IE\ga_IE.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ga_IE\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\gl_ES\gl_ES.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\gl_ES\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\gu_IN\gu_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\gu_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\he_IL\he_IL.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\he_IL\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\he_IL\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\hi_IN\hi_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\hi_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\hr_HR\hr_HR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\hr_HR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\hu_HU\hu_HU.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\hu_HU\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\id_ID\id_ID.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\id_ID\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\is_IS\is_IS.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\is_IS\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\it_IT\it_IT.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\it_IT\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ja_JP\ja_JP.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ja_JP\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ka_GE\ka_GE.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ka_GE\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\kn_IN\kn_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\kn_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ko_KR\ko_KR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ko_KR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\lt_LT\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\lt_LT\lt_LT.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\lv_LV\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\lv_LV\lv_LV.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\mg_MG\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\mg_MG\mg_MG.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\mk_MK\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\mk_MK\mk_MK.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ml_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ml_IN\ml_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\mr_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\mr_IN\mr_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ms_MY\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ms_MY\ms_MY.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\nb_NO\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\nb_NO\nb_NO.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\nl_NL\junk.html
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\nl_NL\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\nl_NL\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\nl_NL\nl_NL.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\nn_NO\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\nn_NO\nn_NO.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\pa_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\pa_IN\pa_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\pl_PL\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\pl_PL\pl_PL.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\pt_BR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\pt_BR\pt_BR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\pt_PT\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\pt_PT\pt_PT.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ro_RO\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ro_RO\ro_RO.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ru_RU\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ru_RU\ru_RU.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\si_LK\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\si_LK\si_LK.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\sk_SK\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\sk_SK\sk_SK.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\sl_SI\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\sl_SI\sl_SI.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\sq_AL\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\sq_AL\sq_AL.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\sr_RS\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\sr_RS\sr_RS.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\sv_SE\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\sv_SE\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\sv_SE\sv_SE.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ta_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ta_IN\ta_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\th_TH\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\th_TH\th_TH.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\tl_PH\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\tl_PH\tl_PH.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\tr_TR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\tr_TR\tr_TR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\uk_UA\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\uk_UA\uk_UA.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ur_PK\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\ur_PK\ur_PK.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\vi_VN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\vi_VN\vi_VN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\zh_CN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\zh_CN\zh_CN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\zh_TW\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\languages\zh_TW\zh_TW.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1131251001\lp_languages.zip
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\af_ZA\af_ZA.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\af_ZA\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ar_EG\ar_EG.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ar_EG\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ar_SA\ar_SA.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ar_SA\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\az_AZ\az_AZ.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\az_AZ\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\be_BY\be_BY.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\be_BY\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\bg_BG\bg_BG.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\bg_BG\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\bn_BD\bn_BD.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\bn_BD\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\bs_BA\bs_BA.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\bs_BA\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ca_ES\ca_ES.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ca_ES\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\cs_CZ\cs_CZ.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\cs_CZ\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\da_DK\da_DK.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\da_DK\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\de_DE\de_DE.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\de_DE\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\de_DE\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\de_DE\wxstd.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\el_GR\el_GR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\el_GR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\en_AU\en_AU.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\en_AU\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\en_GB\en_GB.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\en_GB\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\en_US\en_US.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\en_US\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\eo_US\eo_US.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\eo_US\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\es_ES\es_ES.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\es_ES\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\es_MX\es_MX.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\es_MX\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\et_EE\et_EE.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\et_EE\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\fa_IR\fa_IR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\fa_IR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\fa_IR\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\fi_FI\fi_FI.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\fi_FI\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\fr_CA\fr_CA.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\fr_CA\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\fr_FR\fr_FR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\fr_FR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\fr_FR\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ga_IE\ga_IE.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ga_IE\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\gl_ES\gl_ES.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\gl_ES\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\gu_IN\gu_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\gu_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\he_IL\he_IL.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\he_IL\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\he_IL\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\hi_IN\hi_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\hi_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\hr_HR\hr_HR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\hr_HR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\hu_HU\hu_HU.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\hu_HU\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\id_ID\id_ID.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\id_ID\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\is_IS\is_IS.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\is_IS\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\it_IT\it_IT.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\it_IT\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ja_JP\ja_JP.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ja_JP\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ka_GE\ka_GE.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ka_GE\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\kn_IN\kn_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\kn_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ko_KR\ko_KR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ko_KR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\lt_LT\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\lt_LT\lt_LT.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\lv_LV\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\lv_LV\lv_LV.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\mg_MG\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\mg_MG\mg_MG.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\mk_MK\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\mk_MK\mk_MK.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ml_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ml_IN\ml_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\mr_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\mr_IN\mr_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ms_MY\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ms_MY\ms_MY.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\nb_NO\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\nb_NO\nb_NO.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\nl_NL\junk.html
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\nl_NL\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\nl_NL\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\nl_NL\nl_NL.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\nn_NO\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\nn_NO\nn_NO.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\pa_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\pa_IN\pa_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\pl_PL\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\pl_PL\pl_PL.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\pt_BR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\pt_BR\pt_BR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\pt_PT\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\pt_PT\pt_PT.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ro_RO\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ro_RO\ro_RO.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ru_RU\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ru_RU\ru_RU.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\si_LK\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\si_LK\si_LK.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\sk_SK\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\sk_SK\sk_SK.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\sl_SI\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\sl_SI\sl_SI.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\sq_AL\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\sq_AL\sq_AL.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\sr_RS\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\sr_RS\sr_RS.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\sv_SE\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\sv_SE\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\sv_SE\sv_SE.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ta_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ta_IN\ta_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\th_TH\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\th_TH\th_TH.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\tl_PH\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\tl_PH\tl_PH.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\tr_TR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\tr_TR\tr_TR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\uk_UA\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\uk_UA\uk_UA.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ur_PK\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\ur_PK\ur_PK.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\vi_VN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\vi_VN\vi_VN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\zh_CN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\zh_CN\zh_CN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\zh_TW\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\languages\zh_TW\zh_TW.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1828001874\lp_languages.zip
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\af_ZA\af_ZA.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\af_ZA\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ar_EG\ar_EG.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ar_EG\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ar_SA\ar_SA.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ar_SA\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\az_AZ\az_AZ.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\az_AZ\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\be_BY\be_BY.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\be_BY\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\bg_BG\bg_BG.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\bg_BG\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\bn_BD\bn_BD.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\bn_BD\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\bs_BA\bs_BA.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\bs_BA\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ca_ES\ca_ES.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ca_ES\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\cs_CZ\cs_CZ.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\cs_CZ\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\da_DK\da_DK.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\da_DK\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\de_DE\de_DE.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\de_DE\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\de_DE\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\de_DE\wxstd.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\el_GR\el_GR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\el_GR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\en_AU\en_AU.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\en_AU\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\en_GB\en_GB.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\en_GB\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\en_US\en_US.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\en_US\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\eo_US\eo_US.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\eo_US\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\es_ES\es_ES.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\es_ES\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\es_MX\es_MX.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\es_MX\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\et_EE\et_EE.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\et_EE\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\fa_IR\fa_IR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\fa_IR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\fa_IR\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\fi_FI\fi_FI.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\fi_FI\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\fr_CA\fr_CA.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\fr_CA\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\fr_FR\fr_FR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\fr_FR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\fr_FR\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ga_IE\ga_IE.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ga_IE\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\gl_ES\gl_ES.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\gl_ES\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\gu_IN\gu_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\gu_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\he_IL\he_IL.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\he_IL\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\he_IL\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\hi_IN\hi_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\hi_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\hr_HR\hr_HR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\hr_HR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\hu_HU\hu_HU.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\hu_HU\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\id_ID\id_ID.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\id_ID\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\is_IS\is_IS.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\is_IS\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\it_IT\it_IT.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\it_IT\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ja_JP\ja_JP.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ja_JP\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ka_GE\ka_GE.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ka_GE\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\kn_IN\kn_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\kn_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ko_KR\ko_KR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ko_KR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\lt_LT\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\lt_LT\lt_LT.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\lv_LV\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\lv_LV\lv_LV.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\mg_MG\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\mg_MG\mg_MG.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\mk_MK\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\mk_MK\mk_MK.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ml_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ml_IN\ml_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\mr_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\mr_IN\mr_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ms_MY\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ms_MY\ms_MY.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\nb_NO\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\nb_NO\nb_NO.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\nl_NL\junk.html
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\nl_NL\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\nl_NL\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\nl_NL\nl_NL.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\nn_NO\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\nn_NO\nn_NO.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\pa_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\pa_IN\pa_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\pl_PL\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\pl_PL\pl_PL.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\pt_BR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\pt_BR\pt_BR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\pt_PT\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\pt_PT\pt_PT.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ro_RO\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ro_RO\ro_RO.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ru_RU\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ru_RU\ru_RU.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\si_LK\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\si_LK\si_LK.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\sk_SK\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\sk_SK\sk_SK.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\sl_SI\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\sl_SI\sl_SI.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\sq_AL\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\sq_AL\sq_AL.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\sr_RS\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\sr_RS\sr_RS.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\sv_SE\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\sv_SE\messages.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\sv_SE\sv_SE.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ta_IN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ta_IN\ta_IN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\th_TH\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\th_TH\th_TH.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\tl_PH\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\tl_PH\tl_PH.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\tr_TR\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\tr_TR\tr_TR.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\uk_UA\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\uk_UA\uk_UA.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ur_PK\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\ur_PK\ur_PK.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\vi_VN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\vi_VN\vi_VN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\zh_CN\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\zh_CN\zh_CN.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\zh_TW\lastpass.mo
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\languages\zh_TW\zh_TW.xpm
c:\users\Dave\AppData\Roaming\Local\Temp\lptmp1898563716\lp_languages.zip
c:\users\Dave\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1630.lnk
c:\users\Dave\GoToAssistDownloadHelper.exe
c:\windows\system32\SET8962.tmp
.
.
(((((((((((((((((((((((((   Files Created from 2014-08-07 to 2014-09-07  )))))))))))))))))))))))))))))))
.
.
2014-09-07 09:44 . 2014-09-07 09:44   --------   d-----w-   c:\users\Default\AppData\Local\temp
2014-09-07 09:44 . 2014-09-07 09:50   --------   d-----w-   c:\users\Dave\AppData\Local\temp
2014-09-06 23:03 . 2014-09-06 23:07   --------   d-----w-   C:\AdwCleaner
2014-09-06 20:16 . 2014-09-06 20:16   --------   d-----w-   c:\programdata\REGSERVO
2014-09-06 20:16 . 2014-09-06 20:16   --------   d-----w-   c:\program files\REGSERVO
2014-09-05 07:43 . 2014-08-21 02:44   8581864   ----a-w-   c:\programdata\Microsoft\Windows Defender\Definition Updates\{4B13788B-BD91-4E49-B510-7FE333C7E9AA}\mpengine.dll
2014-08-21 05:27 . 2014-08-21 05:27   --------   d-----w-   c:\users\Dave\AppData\Local\Adobe
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-09-02 20:51 . 2012-06-30 06:31   153256   ----a-w-   c:\windows\system32\WRusr.dll
2014-09-02 20:51 . 2012-06-30 06:31   116736   ----a-w-   c:\windows\system32\drivers\WRkrn.sys
2014-08-31 08:36 . 2011-03-28 17:36   23256   ----a-w-   c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-08-25 05:53 . 2009-10-03 10:47   231584   ------w-   c:\windows\system32\MpSigStub.exe
2014-08-15 05:26 . 2014-01-28 20:59   71344   ----a-w-   c:\windows\system32\FlashPlayerCPLApp.cpl
2014-08-15 05:26 . 2014-01-28 20:59   699568   ----a-w-   c:\windows\system32\FlashPlayerApp.exe
2013-12-11 12:14 . 2012-11-15 16:20   10395072   ----a-w-   c:\program files\Common Files\wruninstall.exe
2010-07-08 09:37 . 2010-07-08 09:37   101544   ----a-w-   c:\program files\Common Files\LinkInstaller.exe
2011-11-21 04:21 . 2011-12-04 17:46   134104   ----a-w-   c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\_WrSyncExcl]
@="{8D7FC74C-E409-42DF-8EEE-69D45FAE2F30}"
[HKEY_CLASSES_ROOT\CLSID\{8D7FC74C-E409-42DF-8EEE-69D45FAE2F30}]
2014-09-02 20:51   153256   ----a-w-   c:\windows\System32\WRusr.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\_WrSyncGreen]
@="{6DA1ED92-315E-4D0B-B354-9D5F519DBA95}"
[HKEY_CLASSES_ROOT\CLSID\{6DA1ED92-315E-4D0B-B354-9D5F519DBA95}]
2014-09-02 20:51   153256   ----a-w-   c:\windows\System32\WRusr.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\_WrSyncRed]
@="{1914B27A-33C8-46F8-A1C2-F993268D4564}"
[HKEY_CLASSES_ROOT\CLSID\{1914B27A-33C8-46F8-A1C2-F993268D4564}]
2014-09-02 20:51   153256   ----a-w-   c:\windows\System32\WRusr.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\_WrSyncYellow]
@="{C14874EA-ACE4-4A47-8A81-18C4D1C40868}"
[HKEY_CLASSES_ROOT\CLSID\{C14874EA-ACE4-4A47-8A81-18C4D1C40868}]
2014-09-02 20:51   153256   ----a-w-   c:\windows\System32\WRusr.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-17 1049896]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-07-10 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-07-10 170520]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-07-10 145944]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-09-08 421888]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2013-05-08 41056]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"WRSVC"="c:\program files\Webroot\WRSA.exe" [2014-09-02 765048]
"Zune Launcher"="c:\program files\Zune\ZuneLauncher.exe" [2011-08-05 159456]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"="c:\program files\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" [2013-11-27 21720]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoDevMgrUpdate"= 0 (0x0)
"NoDFSTab"= 0 (0x0)
"NoEncryptOnMove"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoStartMenuSubFolders"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDevMgrUpdate"= 0 (0x0)
"NoDFSTab"= 0 (0x0)
"NoEncryptOnMove"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoStartMenuSubFolders"= 0 (0x0)
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"DisableLocalMachineRun"= 0 (0x0)
"DisableLocalMachineRunOnce"= 0 (0x0)
"DisableCurrentUserRun"= 0 (0x0)
"DisableCurrentUserRunOnce"= 0 (0x0)
"NoFile"= 0 (0x0)
"HideClock"= 0 (0x0)
"NoDevMgrUpdate"= 0 (0x0)
"NoDFSTab"= 0 (0x0)
"NoEncryptOnMove"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoStartMenuSubFolders"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^Users^Dave^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^BBC iPlayer Desktop.lnk]
path=c:\users\Dave\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BBC iPlayer Desktop.lnk
backup=c:\windows\pss\BBC iPlayer Desktop.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-04-04 21:06   958576   ----a-w-   c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2013-05-08 21:20   41056   ----a-w-   c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2007-05-08 15:24   54840   ----a-w-   c:\program files\HP\HP Software Update\hpwuSchd2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpWirelessAssistant]
2008-04-15 21:51   488752   ----a-w-   c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2010-11-17 20:59   421160   ----a-w-   c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe]
2008-08-01 23:14   202032   ----a-w-   c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QPService]
2008-09-24 01:21   468264   ----a-w-   c:\program files\HP\QuickPlay\QPService.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-09-08 11:17   421888   ----a-w-   c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoftAuto.exe]
2008-08-13 03:49   405504   ----a-w-   c:\program files\Creative\Software Update 3\SoftAuto.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
2008-01-21 02:35   202240   ----a-w-   c:\program files\Windows Media Player\wmpnscfg.exe
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork   REG_MULTI_SZ      PLA DPS BFE mpssvc
LocalServiceAndNoImpersonation   REG_MULTI_SZ      FontCache
HPService   REG_MULTI_SZ      HPSLPSVC
HPZ12   REG_MULTI_SZ      Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt   REG_MULTI_SZ      hpqcxs08 hpqddsvc
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
ezSharedSvc
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-01-27 21:28   451872   ----a-w-   c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-09-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-28 05:26]
.
2014-08-21 c:\windows\Tasks\HPCeeScheduleForDave.job
- c:\program files\hewlett-packard\sdp\ceement\HPCEE.exe [2008-10-25 18:34]
.
2014-09-06 c:\windows\Tasks\REGSERVO.job
- c:\program files\REGSERVO\RegSERVO.exe [2013-07-24 07:28]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://google.co.uk/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_gb&c=91&bd=Pavilion&pf=cnnb
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 194.168.4.100 194.168.8.100
DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/2.9.3.0/GarminAxControl.CAB
DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} - hxxp://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20090626094001
DPF: {2665693B-C4F3-434B-83DB-7574CF50C8B7} - hxxp://www.kaspersky.co.uk/downloads/misc/kasperskylicensefinder.cab
FF - ProfilePath - c:\users\Dave\AppData\Roaming\Mozilla\Firefox\Profiles\zcqxsw8e.default\
FF - ExtSQL: !HIDDEN! 2010-05-01 16:56; smartwebprinting@hp.com; c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
.
------- File Associations -------
.
JSEFile="%SystemRoot%\System32\WScript.exe" "%1" %*
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{88c7f2aa-f93f-432c-8f0e-b7d85967a527} - (no file)
Toolbar-10 - (no file)
WebBrowser-{88C7F2AA-F93F-432C-8F0E-B7D85967A527} - (no file)
HKLM-Run-NPSStartup - (no file)
SafeBoot-Wdf01000.sys
SafeBoot-WudfPf
SafeBoot-WudfRd
MSConfigStartUp-HP Health Check Scheduler - c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
MSConfigStartUp-SunJavaUpdateSched - c:\program files\Java\jre6\bin\jusched.exe
MSConfigStartUp-UCam_Menu - c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
MSConfigStartUp-UpdateLBPShortCut - c:\program files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe
MSConfigStartUp-UpdateP2GoShortCut - c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe
MSConfigStartUp-UpdatePDIRShortCut - c:\program files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe
MSConfigStartUp-UpdatePSTShortCut - c:\program files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2014-09-07 10:52
Windows 6.0.6002 Service Pack 2 NTFS
.
scanning hidden processes ... 
.
scanning hidden autostart entries ...
.
scanning hidden files ... 
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\Norton Internet Security]
"ImagePath"="\"c:\program files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe\" /s \"Norton Internet Security\" /m \"c:\program files\Norton Internet Security\Engine\16.0.0.125\diMaster.dll\" /prefetch:1"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\WLANExt.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Codebox\BitMeterOS\BitMeterCaptureService.exe
c:\program files\Codebox\BitMeterOS\BitMeterWebService.exe
c:\program files\Creative\Shared Files\CTDevSrv.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\SMINST\BLService.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\windows\system32\DRIVERS\xaudio.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
c:\program files\HP\Digital Imaging\bin\hpqbam08.exe
c:\program files\HP\Digital Imaging\bin\hpqgpc01.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
.
**************************************************************************
.
Completion time: 2014-09-07  10:56:51 - machine was rebooted
ComboFix-quarantined-files.txt  2014-09-07 09:56
.
Pre-Run: 40,874,201,088 bytes free
Post-Run: 43,214,221,312 bytes free
.
- - End Of File - - 4C0F8DFA7D6E1E98EDFC7519717A34F6
588AE8F0C685C02BA11F30D9CD7E61A0
26
Malware removal and help / Re: Running very slow and other issues
« Last post by Derek on September 07, 2014, 09:59:10 »
I can't see anything obvious in the logs
Which browser do you get the problem in
Is it only IE or is it chrome or Firefox as well
I have seen similar comments from other users of Webroot software and it could well be the webroot  web filtering extension

If you are still getting  the error on start up then something is still there so


Delete any existing version of ComboFix you have sitting on your desktop
Please read and follow all these instructions very carefully
Do not edit or remove any information or user names etc, otherwise we cannot fix the problem. If you insist on editing out anything then I will close the topic & refuse to offer any help.

Download ComboFix from Hereto your Desktop.

**Note:  It is important that it is saved directly to your desktop  and run from the desktop and not any other folder on your computer**
--------------------------------------------------------------------
1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

  • Very Important! Temporarily disable your anti-virus and  anti-malware real-time protection and any script blocking components of them or your firewall before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results" or stop combofix running at all
  • Click on THIS LINK to see instructions on how to temporarily disable many security programs while running combofix. The list does not cover every program. If yours is not listed and you don't know how to disable it, please ask.
  • Remember to re enable the protection again after combofix has finished
--------------------------------------------------------------------
2. Close any open browsers and any other programs you might have running
Double click on combofix.exe & follow the prompts.
If you are using windows XP It might display a pop up saying that "Recovery console is not installed, do you want to install?"
Please select yes & let it download the files it needs to do this. Once the recovery console is installed Combofix will then offer to scan for malware. Select continue or yes.
When finished, it will produce a report for you. 
Please post the "C:\ComboFix.txt" for further review


****Note: Do not mouseclick combofix's window while it's running. That may cause it to stall or freeze ****

Note: ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.
Note: Combofix prevents autorun of ALL CDs, floppies and USB devices to assist with malware removal & increase security.Read HERE why we disable autoruns

Please do not install any new programs or update anything (always allow your antivirus/antispyware to update) unless told to do so while we are fixing your problem. If combofix alerts to a new version and offers to update, please let it. It is essential we always use the latest version. 

Please tell us if it has cured the problems or if there are any outstanding issues

*EXTRA NOTES*
  • If Combofix detects any Rootkit/Bootkit activity on your system it will give a warning and prompt for a reboot, you must allow it to do so.
  • If Combofix reboot is due to a rootkit, the screen may stay black for several minutes on reboot, this is normal
       
  • If after running Combofix you receive any type of warning message about registry key's being listed for deletion when trying to open certain items, reboot the system and this will fix the issue (Those items will not be deleted)
Post the log in next reply please...
27
Malware removal and help / Re: Running very slow and other issues
« Last post by Davejj on September 07, 2014, 09:38:45 »
Good morning Derek,

It is better.. initially when I strated browsing this morning pages loaded faster and sites such as autotrader work faster. But I am still getting a lag at times where pages are very juddery or if I say uncheck a box it can take a few seconds to actually uncheck.

I just left a donation and when directed to your hedgehog site as I scrolled down it was not smooth.... so if I scrol down again it lags.

Maybe this is down to other problems? I notice that my cpu usage is high... my fan seems to always be running, I still have the dll error message at start up, I do find that the longer the machine is running the worse it gets.

Did you find any/many issues from the logs?

Thanks in advance
28
Malware removal and help / Re: Running very slow and other issues
« Last post by Davejj on September 07, 2014, 01:36:16 »
Seems so... I will shut down now and then have a good hour in the morning to see if its better... and then report back.
29
Malware removal and help / Re: Running very slow and other issues
« Last post by Derek on September 07, 2014, 01:18:50 »
How is it now
Has that made a difference
30
Malware removal and help / Re: Running very slow and other issues
« Last post by Davejj on September 07, 2014, 00:11:03 »
# AdwCleaner v3.309 - Report created 07/09/2014 at 00:07:04
# Updated 02/09/2014 by Xplode
# Operating System : Windows Vista (TM) Home Basic Service Pack 2 (32 bits)
# Username : Dave - DAVE-PC
# Running from : C:\Users\Dave\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : yewimmxqbs32

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\NCH Software
Folder Deleted : C:\Program Files\002
Folder Deleted : C:\Program Files\iMesh Applications
Folder Deleted : C:\Program Files\MyPC Backup
Folder Deleted : C:\Users\Dave\AppData\Local\iMesh
Folder Deleted : C:\Users\Dave\AppData\Local\PackageAware
Folder Deleted : C:\Users\Dave\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Dave\AppData\LocalLow\imeshbandmltbpi
Folder Deleted : C:\Users\Dave\AppData\LocalLow\PriceGong
File Deleted : C:\END
File Deleted : C:\Users\Dave\AppData\Roaming\Mozilla\Firefox\Profiles\zcqxsw8e.default\user.js

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2790392
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{28387537-E3F9-4ED7-860C-11E69AF4A8A0}]
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\Imesh
Key Deleted : HKCU\Software\PIP
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\mediabarim
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\LevelQualityWatcher
Key Deleted : HKLM\SOFTWARE\PIP
Key Deleted : HKLM\SOFTWARE\RrSavings
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Imesh
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\RrSavings

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16476


-\\ Mozilla Firefox v8.0.1 (en-GB)

[ File : C:\Users\Dave\AppData\Roaming\Mozilla\Firefox\Profiles\zcqxsw8e.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [4052 octets] - [07/09/2014 00:05:25]
AdwCleaner[S0].txt - [4000 octets] - [07/09/2014 00:07:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4060 octets] ##########
Pages: 1 2 [3] 4 5 6 7 8 ... 10

Donations

You have come to The Spykiller for help because your Antivirus or Antispyware hasn't been able to fix your problem.

Modern Malware has become so involved and difficult to fix that it takes a very long time and a lot of hard work to read all the logs posted here and research and prepare the fixes for you. In many cases each part of the fix takes about 30 minutes to prepare, so a large part of my time is spent helping you

Would you do all this for nothing?

The reason I run this site is to raise funds for Hedgehog Rescue

Please donate if I have helped you or you have found this site useful.

You can donate safely and securely by using the paypal service, just click on one of the buttons below.

To donate in UK £

To donate in US$

To donate in Euro €

Any amount no matter how small is gratefully accepted and needed to ensure we keep the Rescue Centre running

To donate via paypal when the button doesn't appear or the link doesn't work: just go to www.paypal.com or your country's paypal log in page and chose send money and use help@thehedgehog.co.uk as recipient email address and select other service as the option. then follow prompts


Useful Advice and Programs

Stop killing hedgehogs with strimmers
Welcome, Guest. Please login or register.
Did you miss your activation email?
March 03, 2015, 14:58:59

Login with username, password and session length

secunia Software inspector


RoboForm: Learn more...

You have come to The Spykiller for help because your Antivirus or Antispyware hasn't been able to fix your problem.

Modern Malware is so involved and difficult to fix that it takes a very long time and a lot of hard work to read all the logs posted here and research and prepare the fixes for you.
In many cases each part of the fix takes about 30 minutes to prepare, so a large part of my time is spent helping you

Would you do all this for nothing?

I run this site to help raise funds for Hedgehog Rescue

Please donate if I have helped you or you have found this site useful.

You can donate safely and securely by using the PayPal service, just click on one of the buttons below.

To donate in UK £

To donate in US$

To donate in Euro €

Any amount no matter how small is gratefully accepted and needed to ensure we keep the Rescue Centre running