1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

MSIL:Blada bindi-IT

Discussion in 'Malware Removal Help' started by daveleonard, Aug 29, 2014.

  1. daveleonard

    daveleonard Registered Members

    Joined:
    Dec 2, 2013
    Messages:
    417
    Operating System:
    Windows 10
    Computer Brand or Motherboard:
    Acer Aspire
    CPU:
    See below
    Memory:
    Ditto
    Hard Drive:
    Ditto
    Graphics Card:
    Ditto
    Power Supply:
    Ditto
    Ok Starbuck I hope I did everything right. I will attach the reports. I have a question though: since I have made the hybernation option unavailable does that mean it has been deleted and also the worm? The Avast root time scan found the worm in hiberfil but could not fix it while running the scan. When I look at the report later though it advises me that the worm has been fixed. I don't know but please see the reports and thanks so much for your help. Dave

    # AdwCleaner v3.308 - Report created 30/08/2014 at 10:00:11
    # Updated 20/08/2014 by Xplode
    # Operating System : Windows 7 Ultimate Service Pack 1 (32 bits)
    # Username : daveleonard - USER-PC
    # Running from : C:\Users\daveleonard\Desktop\AdwCleaner.exe
    # Option : Clean

    ***** [ Services ] *****

    [#] Service Deleted : BackupStack

    ***** [ Files / Folders ] *****

    Folder Deleted : C:\ProgramData\hotspot shield
    Folder Deleted : C:\ProgramData\Tbccint
    Folder Deleted : C:\Program Files\hotspot shield
    Folder Deleted : C:\Program Files\MyPC Backup
    Folder Deleted : C:\Program Files\Tbccint
    Folder Deleted : C:\Users\daveleonard\AppData\Local\Tbccint
    Folder Deleted : C:\Users\DAVELE~1\AppData\Local\Temp\hotspot shield
    Folder Deleted : C:\Users\DAVELE~1\AppData\Local\Temp\Hotspot_Shield
    Folder Deleted : C:\Users\daveleonard\AppData\LocalLow\Tbccint
    Folder Deleted : C:\Users\daveleonard\AppData\Roaming\hotspot shield
    Folder Deleted : C:\Users\daveleonard\AppData\Roaming\Tuneup Pro
    Folder Deleted : C:\Users\daveleonard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
    File Deleted : C:\END
    File Deleted : C:\Windows\system32\roboot.exe
    File Deleted : C:\Users\daveleonard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
    File Deleted : C:\Users\daveleonard\Desktop\MyPC Backup.lnk
    File Deleted : C:\Users\daveleonard\Desktop\Sync Folder.lnk

    ***** [ Scheduled Tasks ] *****

    Task Deleted : LaunchSignup
    Task Deleted : Tuneup Pro
    Task Deleted : Tuneup Pro_DEFAULT
    Task Deleted : Tuneup Pro_UPDATES

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1561552
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{87EAB409-97D7-4889-ACFA-C548FC6F3ECF}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{87EAB409-97D7-4889-ACFA-C548FC6F3ECF}
    Key Deleted : HKCU\Software\Conduit
    Key Deleted : HKCU\Software\Tbccint
    Key Deleted : HKCU\Software\Tbccint_HKLM
    Key Deleted : HKCU\Software\Tune
    Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
    Key Deleted : HKCU\Software\AppDataLow\Software\Tbccint
    Key Deleted : HKCU\Software\AppDataLow\Software\TbccintSearchScopes
    Key Deleted : HKLM\SOFTWARE\systweak
    Key Deleted : HKLM\SOFTWARE\Tune
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup

    ***** [ Browsers ] *****

    -\\ Internet Explorer v11.0.9600.17041

    Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

    -\\ Mozilla Firefox v31.0 (x86 en-US)

    [ File : C:\Users\daveleonard\AppData\Roaming\Mozilla\Firefox\Profiles\fnbc3vqd.default\prefs.js ]

    Line Deleted : user_pref("CT1561552_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1409307487385,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
    Line Deleted : user_pref("Smartbar.TBHomepagesList", "hxxp://search.conduit.com/?ctid=CT1561552&CUI=UN71753652123040272&UM=7&SearchSource=13");
    Line Deleted : user_pref("Smartbar.TBSearchEngineList", "Hotspot Shield Customized Web Search");
    Line Deleted : user_pref("Smartbar.TBSearchUrlList", "hxxp://trovi.com/ResultsExt.aspx?ctid=CT1561552&SearchSource=2&CUI=UN71753652123040272&UM=7&q=");
    Line Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT1561552");
    Line Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT1561552");
    Line Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT1561552&CUI=UN71753652123040272&UM=7&SearchSource=13");
    Line Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://trovi.com/ResultsExt.aspx?ctid=CT1561552&SearchSource=2&CUI=UN71753652123040272&UM=7&q=");
    Line Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT1561552");
    Line Deleted : user_pref("smartbar.homePageOwnerCTID", "CT1561552");
    Line Deleted : user_pref("smartbar.homepageList", "hxxp://search.conduit.com/?ctid=CT1561552&CUI=UN71753652123040272&UM=7&SearchSource=13");
    Line Deleted : user_pref("smartbar.machineId", "HAHGPY2JLLWCRAIR0DCAJZLHAEU6U4IGXS/XRCKGZMAIGLBSBWDR+QQRPAHJEDRTCPSD1J7CTKTNMM+OACPAPQ");
    Line Deleted : user_pref("smartbar.searchAddressUrlList", "hxxp://trovi.com/ResultsExt.aspx?ctid=CT1561552&SearchSource=2&CUI=UN71753652123040272&UM=7&q=");

    -\\ Google Chrome v36.0.1985.143

    [ File : C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    Deleted [Search Provider] : hxxp://www.amazon.com/websearch/ref=bit_bds-p12_serp_cr_us_display?ie=UTF8&tagbase=bds-p12&tag=bds-p12-serp-us-cr-20&tbrId=v1_abb-channel-12_8b296c1454a84cbc9c97574ad6f16dbb_39_1006_20130904_PH_cr_ds_&query={searchTerms}
    Deleted [Search Provider] : hxxp://websearch.pu-results.info/?l=1&q={searchTerms}&pid=356&r=2013/03/17&hid=2499347509&lg=EN&cc=US
    Deleted [Search Provider] : hxxp://search.sweetim.com/search.asp?q={searchTerms}&ln=en&src=10&ptr=0&barid=%7B8081afd5-a90c-11e0-a98c-705ab61d67fa%7D&sf=0
    Deleted [Search Provider] : hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=444de378000000000000000000000000&tlver=1.4.19.19&ss=1&affID=18039
    Deleted [Search Provider] : hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_ir_14_35_ch&cd=2XzuyEtN2Y1L1QzutDyCtCyB0CyE0CtByC0C0FzyyD0FyCyEtN0D0Tzu0SzyyCzytN1L2XzutAtFtDtFtCtDtFtAtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyBtAtAtAtBtC0AyDtG0B0DtC0AtG0DtA0EzytGtByB0A0AtGtA0B0CtCtC0B0C0C0F0E0F0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0FyDtDyEzzyCyCtGtA0AtA0CtGtAyDzy0CtG0C0C0AtCtGyC0EtBzyzy0F0CyEzzyC0BtB2Q&cr=1317748705&ir=
    Deleted [Search Provider] : hxxp://isearch.babylon.com/?q={searchTerms}&babsrc=HP_ss&s=web&as=3&ac=0&sd=1
    Deleted [Search Provider] : hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0101&cd=2XzuyEtN2Y1L1QzutDyCtCyB0CyE0CtByC0C0FzyyD0FyCyEtN0D0Tzu0CyBtAtAtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=302494152&ir=
    Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
    Deleted [Search Provider] : hxxp://dts.search-results.com/sr?src=crb&gct=ds&appid=944&systemid=2&apn_dtid=IME002&apn_ptnrs=AG2&o=APN10641&apn_uid=2131619117574830&q={searchTerms}
    Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
    Deleted [Search Provider] : hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=944&systemid=2&apn_dtid=IME002&apn_ptnrs=AG2&o=APN10641&apn_uid=2131619117574830&q={searchTerms}
    Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
    Deleted [Search Provider] : hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=123700FFFFCAFD9F&affID=123621&tl=gbn419172&tt=110713_9126&tsp=4941
    Deleted [Search Provider] : hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0101&cd=2XzuyEtN2Y1L1QzutDyCtCyB0CyE0CtByC0C0FzyyD0FyCyEtN0D0Tzu0CyBtAtAtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=302494152&ir=
    Deleted [Search Provider] : hxxp://websearch.pu-results.info/?l=1&q={searchTerms}&pid=356&r=2013/03/17&hid=2499347509&lg=EN&cc=US
    Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&stype=Results&Suggest=&useHistory=0&SelfSearch=1&SearchType=SearchWeb&SearchSource=44&ctid=CT3205709&octid=CT3205709
    Deleted [Search Provider] : hxxp://search.creativetoolbars.com/results?src=tb&id=smartbar&g=&q={searchTerms}
    Deleted [Startup_urls] : hxxp://astromenda.com/?f=7&a=ast_ir_14_35_ch&cd=2XzuyEtN2Y1L1QzutDyCtCyB0CyE0CtByC0C0FzyyD0FyCyEtN0D0Tzu0SzyyCzytN1L2XzutAtFtDtFtCtDtFtAtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyBtAtAtAtBtC0AyDtG0B0DtC0AtG0DtA0EzytGtByB0A0AtGtA0B0CtCtC0B0C0C0F0E0F0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0FyDtDyEzzyCyCtGtA0AtA0CtGtAyDzy0CtG0C0C0AtCtGyC0EtBzyzy0F0CyEzzyC0BtB2Q&cr=1317748705&ir=
    Deleted [Homepage] : hxxp://home.sweetim.com/?barid={8081AFD5-A90C-11E0-A98C-705AB61D67FA}

    *************************

    AdwCleaner[R23].txt - [11426 octets] - [26/08/2014 13:05:59]
    AdwCleaner[R24].txt - [24387 octets] - [27/08/2014 15:41:01]
    AdwCleaner[R25].txt - [20981 octets] - [29/08/2014 11:13:58]
    AdwCleaner[R26].txt - [8550 octets] - [30/08/2014 09:58:17]
    AdwCleaner[S18].txt - [10983 octets] - [26/08/2014 13:08:08]
    AdwCleaner[S19].txt - [24402 octets] - [27/08/2014 15:43:46]
    AdwCleaner[S20].txt - [21397 octets] - [29/08/2014 11:17:40]
    AdwCleaner[S21].txt - [8557 octets] - [30/08/2014 10:00:11]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S21].txt - [8618 octets] ##########

    -----------------------------------

    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Scan Date: 8/30/2014
    Scan Time: 9:32:59 AM
    Logfile: MBAM report.txt
    Administrator: Yes

    Version: 2.00.2.1012
    Malware Database: v2014.08.29.07
    Rootkit Database: v2014.08.21.01
    License: Free
    Malware Protection: Disabled
    Malicious Website Protection: Disabled
    Self-protection: Disabled

    OS: Windows 7 Service Pack 1
    CPU: x86
    File System: NTFS
    User: daveleonard

    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 300665
    Time Elapsed: 11 min, 41 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Heuristics: Enabled
    PUP: Warn
    PUM: Enabled

    Processes: 0
    (No malicious items detected)

    Modules: 0
    (No malicious items detected)

    Registry Keys: 12
    PUP.Optional.SmarterPower.A, HKLM\SOFTWARE\CLASSES\CLSID\{914697ae-33f4-4cf6-8931-6d008fa7d9db}, , [f962636991eaff379353e0cc926f669a],
    PUP.Optional.SmarterPower.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{9c6c1750-d0be-486c-8e13-97cf3dbdd8a4}, , [f962636991eaff379353e0cc926f669a],
    PUP.Optional.SmarterPower.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{606B0B5B-DCCE-4A52-93D8-615C98BB9677}, , [f962636991eaff379353e0cc926f669a],
    PUP.Optional.SmarterPower.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{914697AE-33F4-4CF6-8931-6D008FA7D9DB}, , [f962636991eaff379353e0cc926f669a],
    PUP.Optional.SmarterPower.A, HKU\S-1-5-21-4037858357-1239057611-1412149812-1090-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{914697AE-33F4-4CF6-8931-6D008FA7D9DB}, , [f962636991eaff379353e0cc926f669a],
    PUP.Optional.SmarterPower.A, HKU\S-1-5-21-4037858357-1239057611-1412149812-1090-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{914697AE-33F4-4CF6-8931-6D008FA7D9DB}, , [f962636991eaff379353e0cc926f669a],
    PUP.Optional.SmarterPower.A, HKLM\SOFTWARE\CLASSES\CLSID\{914697AE-33F4-4CF6-8931-6D008FA7D9DB}\INPROCSERVER32, , [f962636991eaff379353e0cc926f669a],
    PUP.Optional.SmarterPower.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SmarterPower, , [82d96b6195e606304c1cc12c0ff39868],
    PUP.Optional.SmarterPower.A, HKLM\SOFTWARE\SmarterPower, , [34279b318cefd75f5b0e49a4b54d20e0],
    PUP.Optional.SmarterPower.A, HKU\S-1-5-21-4037858357-1239057611-1412149812-1090-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SmarterPower, , [b8a313b9671433034525c32a2bd728d8],
    PUP.Optional.Conduit.A, HKU\S-1-5-21-4037858357-1239057611-1412149812-1090-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\FF, , [1546c3093f3c063014f8290fd62edf21],
    PUP.Optional.ValueApps.A, HKU\S-1-5-21-4037858357-1239057611-1412149812-1090-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\ValueApps, , [87d4686439421125b100bf5d887bef11],

    Registry Values: 0
    (No malicious items detected)

    Registry Data: 1
    PUP.Optional.Trovi.A, HKU\S-1-5-21-4037858357-1239057611-1412149812-1090-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://trovi.com?SearchSource=10&CUI=&UM=7&ctid=CT1561552, Good: (www.google.com), Bad: (http://trovi.com?SearchSource=10&CUI=&UM=7&ctid=CT1561552),,[f46725a7e19a0630f270508a7b89a65a]

    Folders: 67
    PUP.Optional.SmarterPower.A, C:\Program Files\SmarterPower, , [82d96b6195e606304c1cc12c0ff39868],
    PUP.Optional.Conduit.A, C:\Users\daveleonard\AppData\Local\Temp\ct1561552, , [3c1f804cc0bbd95d0389784bcc36d52b],
    PUP.Optional.MindSpark.A, C:\Users\daveleonard\AppData\Roaming\Mozilla\Firefox\Profiles\fnbc3vqd.default\WeatherBlink, , [9ebd7854ccafdd59fbf55f6dd72be31d],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\screenshots, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\data, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\blackfriday, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\weather, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\weather\images, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\css, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\about, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\apps, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\clean, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\discovery, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\favorites, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\ftue, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\icons, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\icons\pageAction, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\image-upload, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\loaders, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\notifications, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\review-gifs, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\review-gifs\cat, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\bubbles, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\buttons, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\city, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\clean, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\disco, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\fishing, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\forest, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\mountains, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\planets, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\sea, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\space, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\strips, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\sunset, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\user, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\locales, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\ar, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\de, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\en, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\es, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\fr, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\he, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\it, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\ja, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\nl, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\pl, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\pt_BR, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\ru, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\tr, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_metadata, , [87d4973528533cfa7af32bbd7a8832ce],

    Files: 448
    PUP.Optional.SmarterPower.A, C:\Program Files\SmarterPower\SmarterPowerBHO.dll, , [f962636991eaff379353e0cc926f669a],
    PUP.Optional.ClientConnect, C:\$Recycle.Bin\S-1-5-21-4037858357-1239057611-1412149812-1090\$RALG2TJ.exe, , [5506cc007b00171f41494c60bf427987],
    PUP.Optional.ClientConnect, C:\$Recycle.Bin\S-1-5-21-4037858357-1239057611-1412149812-1090\$RHBSBBI.exe, , [8dce5d6f7605ea4c098124883fc259a7],
    PUP.Optional.Conduit.A, C:\$Recycle.Bin\S-1-5-21-4037858357-1239057611-1412149812-1090\$RQ8AQLG.exe, , [411a953705762f0777c93dd7887909f7],
    PUP.Optional.Softonic.A, C:\Users\daveleonard\AppData\Local\Temp\Softonic_EN_1-5-11_EN-Production_10_CleanRelease.exe, , [b1aa20ac116a2b0b3b70dcd16c95eb15],
    PUP.Optional.ClientConnect, C:\Users\daveleonard\AppData\Local\Temp\Hotspot_Shield\tbHots.dll, , [3a21e1eb92e961d5117926862cd534cc],
    PUP.Optional.BundleInstaller.A, C:\Users\daveleonard\AppData\Local\Temp\n4991\s4991.exe, , [d586824ae39815212661133cf20ea759],
    PUP.Optional.BundleInstaller.A, C:\Users\daveleonard\AppData\Local\Temp\n5393\s5393.exe, , [97c4b11b5e1d3bfbfe89d07f3dc33ac6],
    PUP.Optional.BundleInstaller.A, C:\Users\daveleonard\AppData\Local\Temp\n7372\s7372.exe, , [530836963843d6609becce81936d50b0],
    PUP.Optional.Softonic, C:\Users\daveleonard\Downloads\SoftonicDownloader_for_openvpn.exe, , [a3b8c4082556a39384e14371e0213bc5],
    PUP.Optional.Firseria, C:\Users\daveleonard\Downloads\Tor%20Browser%20Bundle.exe, , [76e5a9233843f2444b7bab6064a135cb],
    PUP.Optional.ClientConnect, C:\Users\daveleonard\AppData\Local\Tbccint\Community Alerts\Alert.dll, , [2c2fc408d2a984b263275d4f5aa7f40c],
    PUP.Optional.Astromenda.A, C:\Windows\System32\Tasks\WSE_Astromenda, , [de7df6d6463561d51f1b7f6d2ad810f0],
    PUP.Optional.Astromenda.A, C:\Windows\Tasks\WSE_Astromenda.job, , [b2a9795398e35cda94a7826ace34b749],
    PUP.Optional.SmarterPower.A, C:\Program Files\SmarterPower\SmarterPower.ico, , [82d96b6195e606304c1cc12c0ff39868],
    PUP.Optional.SmarterPower.A, C:\Program Files\SmarterPower\7za.exe, , [82d96b6195e606304c1cc12c0ff39868],
    PUP.Optional.SmarterPower.A, C:\Program Files\SmarterPower\SmarterPowerUninstall.exe, , [82d96b6195e606304c1cc12c0ff39868],
    PUP.Optional.Conduit.A, C:\Users\daveleonard\AppData\Roaming\Mozilla\Firefox\Profiles\fnbc3vqd.default\searchplugins\hotspot-shield-customized-web-search.xml, , [85d6626add9ea78f19ac29d23ec41ce4],
    PUP.Optional.Conduit.A, C:\Users\daveleonard\AppData\Local\Temp\conduitinstaller.exe, , [aab1fad203789e988decce8423e1ae52],
    PUP.Optional.MindSpark.A, C:\Users\daveleonard\AppData\Roaming\Mozilla\Firefox\Profiles\fnbc3vqd.default\WeatherBlink\6DC9B126-2E6D-4F1D-B468-E2B1B666280A.sqlite, , [9ebd7854ccafdd59fbf55f6dd72be31d],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\background.html, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\manifest.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\newtab.html, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\opentab.html, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\comp.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\phone-frame.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\phone.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\screenshots\0-mobile.jpg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\screenshots\0.jpg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\screenshots\1-mobile.jpg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\screenshots\1.jpg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\screenshots\2-mobile.jpg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\screenshots\2.jpg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\screenshots\3-mobile.jpg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\screenshots\3.jpg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\screenshots\4-mobile.jpg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\screenshots\4.jpg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\screenshots\5-mobile.jpg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\facebook\images\carousel\screenshots\5.jpg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\data\gallery.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\9gag.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\afterDownload.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\aim.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\aim_alt.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\amazon.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\apple.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\app_store.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\arto.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\aws.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\baidu.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\basecamp.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\bebo.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\behance.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\bing.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\blogger.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\bnter.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\brightkite.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\cinch.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\cloudapp.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\coroflot.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\creative_commons.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\dailybooth.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\delicious.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\designbump.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\designfloat.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\designmoo.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\deviantart.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\digg.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\digg_alt.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\diigo.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\dribbble.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\dropbox.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\drupal.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\dzone.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\ebay.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\ember.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\etsy.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\evernote.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\expedia.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\facebook.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\facebook_alt.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\facebook_places.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\facto.me.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\feedburner.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\flickr.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\folkd.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\formspring.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\forrst.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\foursquare.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\foxtab.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\friendfeed.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\friendster.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\funmoods.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\gdgt.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\github.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\github_alt.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\gmail.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\goodreads.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\google-drive.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\google.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\google_buzz.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\google_talk.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\gowalla.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\gowalla_alt.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\grooveshark.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\hacker_news.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\hi5.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\hype_machine.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\hyves.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\icq.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\identi.ca.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\installCore.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\instapaper.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\ironSource.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\iS-bizcards.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\iS-confluence.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\blip.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\gameo.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\last.fm.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\msn_messenger.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\picassa.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\retweet.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\squarespace.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\tumblr.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\iS-facebook.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\iS-googleplus.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\iS-jira.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\iS-linkedin.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\iS-news.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\iS-presence.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\iS-signature.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\iS-twitter.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\itunes.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\jira.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\kik.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\krop.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\linkedin.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\linkedin_alt.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\livejournal.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\lovedsgn.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\meetup.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\metacafe.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\ming.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\mister_wong.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\mixx.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\mixx_alt.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\mobileCore.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\mobileme.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\myspace.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\myspace_alt.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\netflix.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\newsvine.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\noaa.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\nytimes.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\official.fm.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\openid.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\orkut.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\pandora.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\path.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\paypal.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\photobucket.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\picasa.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\pinboard.in.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\ping.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\pingchat.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\playstation.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\plixi.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\plurk.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\podcast.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\posterous.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\qik.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\quik.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\quora.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\rdio.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\readernaut.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\reddit.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\robo.to.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\rss.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\salesforce.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\scribd.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\sharethis.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\simplenote.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\skype.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\slashdot.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\slideshare.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\smugmug.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\soundcloud.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\spotify.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\squidoo.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\steam.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\stumbleupon.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\technorati.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\theweatherchannel.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\threewords.me.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\trello.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\tribe.net.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\tripadvisor.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\tripit.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\tweaks-soft.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\twitter.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\twitter_alt.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\vcard.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\viddler.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\vimeo.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\virb.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\w3.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\weatherbug.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\whatsapp.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\wikipedia.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\windows.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\wists.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\wordpress.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\wordpress_alt.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\xing.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\yahoo!_buzz.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\yahoo!_messenger.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\yahoo.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\yelp.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\youtube.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\youtube_alt.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\zerply.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\zootool.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\zynga.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\blackfriday\amazon.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\blackfriday\bestbuy.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\blackfriday\kmart.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\blackfriday\newegg.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\blackfriday\overstock.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\blackfriday\samsung.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\blackfriday\target.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\gallery\images\blackfriday\wallmart.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\weather\images\clock-icon-small-black.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\weather\images\clock-icon-small.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\weather\images\cloud-icon-small-black.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\weather\images\cloud-icon-small.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\weather\images\icons-black.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\app\spots\weather\images\icons.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\css\jquery-ui-1.10.3.custom.min.css, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\css\newtab.css, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\css\normalize.css, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\css\opentab.css, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\css\opentab_global.css, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\close-btn.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\close_80x80.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\default-image-grey.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\default-image.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\default-image.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\powered-by-google.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\about\spotsbeta.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\apps\android-white.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\apps\download.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\apps\star.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\apps\star_full.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\clean\add.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\clean\chrome_apps.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\clean\menu-icon.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\clean\profile.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\clean\recently.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\clean\search.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\clean\searchb.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\clean\sms.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\discovery\arrow-down-active.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\discovery\arrow-down.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\discovery\discovery_facebook.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\favorites\add-item-icon-black.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\favorites\add-item-icon.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\favorites\arrow-down.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\favorites\arrow-up.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\favorites\edit-item-icon.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\favorites\new-tab.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\favorites\plus-black.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\favorites\plus-white.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\favorites\remove-item-icon.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\ftue\arrow-up.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\ftue\ftue-finish-icon.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\ftue\ftue-phone.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\ftue\search-bar.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\icons\128.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\icons\16.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\icons\48.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\icons\arrow-down.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\icons\logo.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\icons\v-icon.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\icons\whitelogo.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\icons\x-icon.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\icons\pageAction\19x19.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\icons\pageAction\19x19b.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\icons\pageAction\38x38.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\icons\pageAction\38x38b.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\image-upload\computer.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\image-upload\screenshot1.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\image-upload\screenshot2.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\image-upload\screenshot3.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\image-upload\screenshot4.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\image-upload\warning.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\loaders\loader.swf, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\loaders\loader_white.swf, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\notifications\birthday-black.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\notifications\birthday.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\notifications\dismiss-icon-black.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\notifications\dismiss-icon.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\notifications\event-black.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\notifications\event.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\notifications\minimize.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\em-clean.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\!.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\android-clean.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\android.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\call-clean.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\call.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\close-chat-clean.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\close-chat.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\contact-default-clean.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\contact-default.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\contact-opacity.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\hangup-black.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\hangup-clean.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\hangup.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\phone-welcome-dismiss-icon-clean.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\phone-welcome-dismiss-icon.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\phone_icon-clean.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\phone_icon.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\phone_preview-clean.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\phone_preview.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\search-call-black.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\search-call-clean.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\search-call.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\search-clean.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\search.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\sms-black.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\sms-clean.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\phone\sms.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\review-gifs\plane.gif, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\review-gifs\rating-star.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\review-gifs\cat\cat_1.gif, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\review-gifs\cat\cat_2.gif, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\review-gifs\cat\cat_3.gif, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\review-gifs\cat\cat_4.gif, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\review-gifs\cat\cat_5.gif, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\bookmark-icon-black.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\bookmark-icon-white.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\calculator-icon-black.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\calculator-icon-white.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\hangup.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\navigation-icon-black.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\navigation-icon-white.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\phone_preview.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\plus-dark-sm.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\remove-dark-sm.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\search-black.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\search-icon-black.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\search-icon-white.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\search.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\sms.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\web-result-icon-black.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\search\web-result-icon-white.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\bubbles\bg.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\bubbles\footer.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\bubbles\thumb.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\buttons\bg.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\buttons\footer.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\buttons\thumb.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\city\bg.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\city\footer.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\city\thumb.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\clean\thumb.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\disco\bg.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\disco\footer.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\disco\thumb.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\fishing\bg.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\fishing\footer.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\fishing\thumb.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\forest\bg.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\forest\footer.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\forest\thumb.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\mountains\bg.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\mountains\footer.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\mountains\thumb.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\planets\bg.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\planets\footer.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\planets\thumb.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\sea\bg.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\sea\footer.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\sea\thumb.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\space\bg.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\space\footer.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\space\thumb.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\strips\bg.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\strips\footer.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\strips\thumb.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\sunset\bg.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\sunset\footer.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\themes\sunset\thumb.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\user\login.svg, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\img\user\menu-icon.png, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\js\background.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\js\bootstrap.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\js\newtab.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\js\opentab.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\jquery.inview.min.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\aes.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\angular-animate.min.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\angular-route.min.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\angular.min.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\async.min.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\aws-sdk-2.0.0-rc9.min.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\eventsource.min.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\idbstore.min.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\jquery-2.1.1.min.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\jquery-ui-1.10.3.custom.min.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\js-canvas-to-blob.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\lodash.underscore.min.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\md5.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\mixins.loadash.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\moment-with-langs.min.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\moment.min.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\phoneformat.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\sortable.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\TweenMax.min.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\lib\utils.js, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\locales\i18n_de.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\locales\i18n_en.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\locales\i18n_es.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\locales\i18n_fr.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\locales\i18n_he.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\locales\i18n_it.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\locales\i18n_ja.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\locales\i18n_nl.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\locales\i18n_pl.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\locales\i18n_pt.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\locales\i18n_ru.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\locales\i18n_tr.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\ar\messages.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\de\messages.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\en\messages.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\es\messages.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\fr\messages.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\he\messages.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\it\messages.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\ja\messages.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\nl\messages.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\pl\messages.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\pt_BR\messages.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\ru\messages.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_locales\tr\messages.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.6_0\_metadata\verified_contents.json, , [87d4973528533cfa7af32bbd7a8832ce],
    PUP.Optional.Astromenda.A, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "startup_urls": [ "http://astromenda.com/?f=7&a=ast_ir...GyC0EtBzyzy0F0CyEzzyC0BtB2Q&cr=1317748705&ir=" ],), ,[4a115d6fef8c989e991eb164689df010]
    PUP.Optional.SweetIM.A, C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "homepage": "http://home.sweetim.com/?barid={8081AFD5-A90C-11E0-A98C-705AB61D67FA}",), ,[510a05c76b10c571cdbbd14729dcc838]

    Physical Sectors: 0
    (No malicious items detected)


    (end)

    ------------------------------

    Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:29-08-2014 01
    Ran by daveleonard (administrator) on USER-PC on 30-08-2014 09:55:11
    Running from D:\
    Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: English (United States)
    Internet Explorer Version 11
    Boot Mode: Normal

    The only official download link for FRST:
    Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
    Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
    Download link from any site other than Bleeping Computer is unpermitted or outdated.
    See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    (Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
    (Ellora Assets Corp.) D:\Freemake\CaptureLib\CaptureLibService.exe
    () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
    () C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
    (Spotflux) D:\Partner\SpotfluxLiteClient.exe
    (TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
    (WIBU-SYSTEMS AG) C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    (Intel Corporation) C:\Windows\System32\hkcmd.exe
    (Intel Corporation) C:\Windows\System32\igfxpers.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
    () C:\Program Files\Hostless Modem\SMART BRO\CheckNDISPort_df.exe
    (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
    (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
    () D:\Wi-Free\launcher.exe
    (TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer.exe
    (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
    (TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\tv_w32.exe
    (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
    (MyPCBackup.com) C:\Program Files\MyPC Backup\MyPC Backup.exe
    (Microsoft Corporation) C:\Windows\System32\audiodg.exe
    (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
    HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-22] (Adobe Systems Incorporated)
    HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-30] (AVAST Software)
    HKLM\...\Run: [CheckNDISPort_df] => C:\Program Files\Hostless Modem\SMART BRO\CheckNDISPort_df.exe [442696 2012-10-19] ()
    HKLM\...\Run: [ospd_us_48] => "C:\Program Files\ospd_us_48\ospd_us_48.exe"
    HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
    HKU\S-1-5-21-4037858357-1239057611-1412149812-1090\...\Run: [Wi-Free] => D:\Wi-Free\launcher.exe [93168 2012-12-24] ()
    HKU\S-1-5-21-4037858357-1239057611-1412149812-1090\...\MountPoints2: F - F:\AutoRun.exe
    HKU\S-1-5-21-4037858357-1239057611-1412149812-1090\...\MountPoints2: {1e14459a-8558-11e3-a6d7-002622822d46} - F:\AutoRun.exe
    HKU\S-1-5-21-4037858357-1239057611-1412149812-1090\...\MountPoints2: {7cea702b-34d5-11e3-a92d-002622822d46} - F:\AutoRun.exe
    HKU\S-1-5-21-4037858357-1239057611-1412149812-1090\...\MountPoints2: {d8d06a92-bca2-11e3-a6f6-002622822d46} - F:\AutoRun.exe
    Startup: C:\Users\daveleonard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
    ShortcutTarget: MyPC Backup.lnk -> C:\Program Files\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
    ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
    ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
    ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
    GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://trovi.com?SearchSource=10&CUI=&UM=7&ctid=CT1561552
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.yahoo.com?fr=hp-avast&type=avastbcl
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://ph.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.yahoo.com?fr=hp-avast&type=avastbcl
    SearchScopes: HKLM - DefaultScope {2E9B1B01-6F2D-4C53-BA69-A58D495DCD50} URL =
    SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = http://www.default-search.net/search?sid=503&aid=100&itype=n&ver=13800&tm=451&src=ds&p={searchTerms}
    SearchScopes: HKCU - DefaultScope {2E9B1B01-6F2D-4C53-BA69-A58D495DCD50} URL = http://trovi.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1561552&CUI=&UM=7
    SearchScopes: HKCU - {2E9B1B01-6F2D-4C53-BA69-A58D495DCD50} URL = http://trovi.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1561552&CUI=&UM=7
    SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = http://www.default-search.net/search?sid=503&aid=100&itype=n&ver=13800&tm=451&src=ds&p={searchTerms}
    BHO: No Name -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> No File
    BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
    BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
    BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
    BHO: SmarterPower -> {914697ae-33f4-4cf6-8931-6d008fa7d9db} -> C:\Program Files\SmarterPower\SmarterPowerbho.dll (SmarterPower)
    BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
    Toolbar: HKLM - No Name - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - No File
    Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
    Winsock: Catalog5 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
    Winsock: Catalog5 05 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
    Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.1

    FireFox:
    ========
    FF ProfilePath: C:\Users\daveleonard\AppData\Roaming\Mozilla\Firefox\Profiles\fnbc3vqd.default
    FF Homepage: about:home
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
    FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
    FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
    FF Plugin: @microsoft.com/GENUINE -> disabled No File
    FF Plugin: @real.com/nppl3260;version=17.0.9.17 -> C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll No File
    FF Plugin: @real.com/nprndlchromebrowserrecordext;version=17.0.9 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll No File
    FF Plugin: @real.com/nprndlhtml5videoshim;version=17.0.9 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll No File
    FF Plugin: @real.com/nprndlpepperflashvideoshim;version=17.0.9 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll No File
    FF Plugin: @real.com/nprpplugin;version=17.0.9.17 -> C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll No File
    FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\daveleonard\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
    FF SearchPlugin: C:\Users\daveleonard\AppData\Roaming\Mozilla\Firefox\Profiles\fnbc3vqd.default\searchplugins\hotspot-shield-customized-web-search.xml
    FF Extension: Tor Flashproxy Badge - C:\Users\daveleonard\AppData\Roaming\Mozilla\Firefox\Profiles\fnbc3vqd.default\Extensions\jid0-1kqApO5BUHwjBQft5BEUXHXZjCA@jetpack.xpi [2014-08-27]
    FF Extension: Troubleshooter - C:\Users\daveleonard\AppData\Roaming\Mozilla\Firefox\Profiles\fnbc3vqd.default\Extensions\troubleshooter@mozilla.org.xpi [2013-12-31]
    FF Extension: Video WithOut Flash - C:\Users\daveleonard\AppData\Roaming\Mozilla\Firefox\Profiles\fnbc3vqd.default\Extensions\vwof@drev.com.xpi [2014-03-31]
    FF Extension: Kaspersky URL Advisor - C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru [2014-08-28]
    FF Extension: Kaspersky URL Advisor - C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2014-08-28]
    FF Extension: Hotspot Shield Extension - C:\Program Files\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com [2014-08-29]
    FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
    FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
    FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-07-07]
    FF HKLM\...\Firefox\Extensions: [{53D8DD28-1C83-41F3-B171-C2ED5B3E5DE8}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
    FF HKLM\...\Firefox\Extensions: [fmdownloader@gmail.com] - D:\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com
    FF Extension: Freemake Video Downloader Plugin - D:\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com [2014-08-26]
    FF HKLM\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - D:\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com
    FF Extension: Freemake Youtube Download Button - D:\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com [2014-08-26]
    FF HKLM\...\Firefox\Extensions: [fmconverter@gmail.com] - D:\Freemake\Freemake Video Converter\BrowserPlugin\Firefox
    FF Extension: Freemake Video Converter Plugin - D:\Freemake\Freemake Video Converter\BrowserPlugin\Firefox [2014-08-26]

    Chrome:
    =======
    CHR HomePage: Default -> hxxp://home.sweetim.com/?barid={8081AFD5-A90C-11E0-A98C-705AB61D67FA}
    CHR StartupUrls: Default -> "hxxp://astromenda.com/?f=7&a=ast_ir_14_35_ch&cd=2XzuyEtN2Y1L1QzutDyCtCyB0CyE0CtByC0C0FzyyD0FyCyEtN0D0Tzu0SzyyCzytN1L2XzutAtFtDtFtCtDtFtAtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyBtAtAtAtBtC0AyDtG0B0DtC0AtG0DtA0EzytGtByB0A0AtGtA0B0CtCtC0B0C0C0F0E0F0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0FyDtDyEzzyCyCtGtA0AtA0CtGtAyDzy0CtG0C0C0AtCtGyC0EtBzyzy0F0CyEzzyC0BtB2Q&cr=1317748705&ir="
    CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
    CHR CustomProfile: C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Mr. Bounce) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajfdmocmkakkkbgcoifcenchgkokpecl [2014-05-15]
    CHR Extension: (Angry Birds) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-05-15]
    CHR Extension: (Emma at the Zoo) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\aoegalefkibilgomommffohdgjihgmfm [2014-05-15]
    CHR Extension: (Google Docs) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-15]
    CHR Extension: (Google Drive) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-15]
    CHR Extension: (Kaboom) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\beahobhgpojnjfdjglaehfhdanaioode [2014-08-25]
    CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-06-04]
    CHR Extension: (YouTube) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-15]
    CHR Extension: (Snail Bob) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\boojbpjmnagikjmogdflhibdljlpjmob [2014-05-15]
    CHR Extension: (Bouncy Mouse) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgdllcbmneiklcmbeclfegccdjholomb [2014-05-15]
    CHR Extension: (Google Search) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-15]
    CHR Extension: (Yahoo Extension) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\eihhgekonheiliaidomffpplfhecmkag [2014-05-15]
    CHR Extension: (JavaScript Editor) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\enhkeonpomkliaedmafeniofidolfmdd [2014-05-15]
    CHR Extension: (Snail Bob 2) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\enoglggbbjpolnkjhfoldfkckeagfbmj [2014-05-15]
    CHR Extension: (Spotflux Lite) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcakbkpmlidimpglgiaclbpgbedlmpfl [2014-08-28]
    CHR Extension: (Snail Bob 4) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggihhaaibedoponjjlaebojfefdeidel [2014-05-15]
    CHR Extension: (Turbo Snail Bob Championships) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjkbdblkobbdadjldenidhhkpbnniohe [2014-07-23]
    CHR Extension: (Pictico — Coloring for Kids) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\gndkeamlgkegbmmoheplcndpopglacgf [2014-05-15]
    CHR Extension: (JavaScript Editey) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkihmgfcedmdoaogcjdljeeacngbhinc [2014-05-15]
    CHR Extension: (Cartoons) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\imeompajaahnjechlgnmgfgpicjjaggd [2014-05-15]
    CHR Extension: (Snail Bob) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\innenmgfmidffbphplkglonocidpoajh [2014-05-15]
    CHR Extension: (Dashlane) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmpplnklgealmmnncbdpehifojcfomaf [2014-05-15]
    CHR Extension: (KIDO'Z TV) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\jokdeafnhahffanabnbjjjjmoechjklc [2014-05-15]
    CHR Extension: (Emma and the Blue Bird) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\khkgfkehlfpffbmcnnfmaakcmnpildei [2014-05-15]
    CHR Extension: (Coloring Pages) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmhphoobahjckipglphjghghlgodanfj [2014-05-15]
    CHR Extension: (Promoterr Kids Videos (Children TV)) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldomgfimnmkeehoemnpalhhfkibjblge [2014-07-23]
    CHR Extension: (Google Maps) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2014-05-15]
    CHR Extension: (Snail Bob 3) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbifkpeechlmjpaofnakfnionccjmdph [2014-05-15]
    CHR Extension: (Poppit!) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi [2014-05-15]
    CHR Extension: (Google Wallet) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-15]
    CHR Extension: (Girl Games) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhohcpdcacocidkmfhjfeapnndabhl [2014-05-15]
    CHR Extension: (Astromenda New Tab) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae [2014-08-27]
    CHR Extension: (The Search) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjdhcanedgcdeffmnghggphmdobiipom [2014-05-15]
    CHR Extension: (Gmail) - C:\Users\daveleonard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-15]
    CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-18]
    CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2014-07-18]
    CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
    CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

    ========================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-18] (AVAST Software)
    S2 BackupStack; C:\Program Files\MyPC Backup\BackupStack.exe [36424 2014-08-27] (Just Develop It)
    R2 CodeMeter.exe; C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe [3105144 2013-11-27] (WIBU-SYSTEMS AG)
    R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2014-08-14] (Freemake) [File not signed]
    R2 FreemakeVideoCapture; D:\Freemake\CaptureLib\CaptureLibService.exe [9216 2014-08-20] (Ellora Assets Corp.) [File not signed]
    S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [20456 2013-01-28] (Microsoft Corporation)
    S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [16384 2006-10-01] () [File not signed]
    R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-04-06] ()
    R2 RealPlayerUpdateSvc; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [23552 2014-04-07] () [File not signed]
    S2 SpotfluxLiteService.exe; D:\Partner\SpotfluxLiteService.exe [19312 2014-02-06] (Microsoft)
    S3 SpotfluxUpdate; D:\Partner\Spotflux Updates.exe [367984 2014-02-06] (Spotflux)
    S2 CGVPNCliService; "D:\CyberGhost 5\Service.exe" [X]
    S2 stunnel; "D:\Spotflux Lite\tunnel\stunnel.exe" -service -install -quiet stunnel.conf [X]

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [26032 2014-04-09] (Wondershare)
    R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-07-18] ()
    R1 aswKbd; C:\Windows\system32\Drivers\aswKbd.sys [21576 2013-08-30] (AVAST Software)
    R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-07-18] (AVAST Software)
    R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-07-18] (AVAST Software)
    R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-07-18] ()
    R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [779536 2014-07-18] (AVAST Software)
    R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [414520 2014-07-18] (AVAST Software)
    R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [71944 2014-07-18] (AVAST Software)
    R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [192352 2014-07-18] ()
    R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [39624 2014-05-17] (AnchorFree Inc.)
    S3 hwusbfake; C:\Windows\System32\DRIVERS\ewusbfake.sys [103040 2008-12-30] (Huawei Technologies Co., Ltd.)
    R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [195296 2013-01-21] (Microsoft Corporation)
    R2 npf; C:\Windows\System32\drivers\npf.sys [35088 2011-02-12] (CACE Technologies, Inc.)
    S3 Passthru; C:\Windows\System32\DRIVERS\PPFlt.sys [24824 2013-12-31] ()
    R3 PrivacyProtectorMP; C:\Windows\System32\DRIVERS\PPFlt.sys [24824 2013-12-31] ()
    S3 ptun0901; C:\Windows\System32\DRIVERS\ptun0901.sys [23552 2014-04-25] (The OpenVPN Project)
    R3 tap0801; C:\Windows\System32\DRIVERS\tap0801.sys [26624 2006-10-01] (The OpenVPN Project) [File not signed]
    R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
    R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [37064 2014-05-17] (Anchorfree Inc.)
    S3 tapSF0901; C:\Windows\System32\DRIVERS\tapSF0901.sys [33728 2013-05-29] (Spotflux, Inc.)
    S3 VGPU; System32\drivers\rdvgkmd.sys [X]

    ==================== NetSvcs (Whitelisted) ===================


    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


    ==================== One Month Created Files and Folders ========

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2014-08-30 09:53 - 2014-08-30 09:55 - 00000000 ____D () C:\FRST
    2014-08-30 09:31 - 2014-08-30 09:32 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
    2014-08-30 09:31 - 2014-08-30 09:31 - 00000613 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
    2014-08-30 09:30 - 2014-08-30 09:30 - 00001879 _____ () C:\Users\daveleonard\Desktop\Sync Folder.lnk
    2014-08-30 09:30 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
    2014-08-30 09:30 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
    2014-08-30 09:30 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
    2014-08-30 09:29 - 2014-08-30 09:30 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\daveleonard\Downloads\mbam-setup-2.0.2.1012.exe
    2014-08-30 09:29 - 2014-08-30 09:30 - 00000000 ____D () C:\Program Files\MyPC Backup
    2014-08-30 09:29 - 2014-08-30 09:29 - 00001009 _____ () C:\Users\daveleonard\Desktop\MyPC Backup.lnk
    2014-08-30 09:29 - 2014-08-30 09:29 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
    2014-08-30 09:28 - 2014-08-30 09:28 - 00000276 _____ () C:\Windows\Tasks\Tuneup Pro_UPDATES.job
    2014-08-30 09:28 - 2014-08-30 09:28 - 00000268 _____ () C:\Windows\Tasks\Tuneup Pro_DEFAULT.job
    2014-08-30 09:28 - 2014-08-20 19:17 - 00017752 _____ () C:\Windows\system32\roboot.exe
    2014-08-30 09:27 - 2014-08-30 09:34 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Tuneup Pro
    2014-08-30 09:13 - 2014-08-30 09:13 - 00001248 _____ () C:\Users\daveleonard\Desktop\MicrosoftFixit50466.msi - Shortcut.lnk
    2014-08-30 08:46 - 2014-08-30 09:49 - 00036015 _____ () C:\Users\daveleonard\Downloads\Result.txt
    2014-08-30 08:45 - 2014-08-30 08:45 - 00401920 _____ (Farbar) C:\Users\daveleonard\Downloads\MiniToolBox.exe
    2014-08-29 15:36 - 2014-08-29 18:06 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\Tbccint
    2014-08-29 15:36 - 2014-08-29 18:06 - 00000000 ____D () C:\Program Files\Tbccint
    2014-08-29 15:34 - 2014-08-29 15:36 - 00000009 _____ () C:\END
    2014-08-29 14:55 - 2014-08-29 14:55 - 00000628 _____ () C:\Users\Public\Desktop\OpenVPN GUI.lnk
    2014-08-29 11:20 - 2014-08-29 19:59 - 00000168 _____ () C:\Windows\setupact.log
    2014-08-29 11:20 - 2014-08-29 11:20 - 00000000 _____ () C:\Windows\setuperr.log
    2014-08-29 11:19 - 2014-08-29 18:16 - 00023190 _____ () C:\Windows\PFRO.log
    2014-08-29 11:07 - 2014-08-29 11:07 - 00000000 ____D () C:\Program Files\OpenVPN
    2014-08-29 11:04 - 2014-08-29 11:04 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\CrashRpt
    2014-08-29 11:02 - 2014-08-29 11:03 - 00000000 ____D () C:\Users\daveleonard\OpenVPN
    2014-08-29 11:02 - 2014-08-29 11:02 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenVPN
    2014-08-29 10:57 - 2014-08-29 10:58 - 00367432 _____ () C:\Users\daveleonard\Downloads\SoftonicDownloader_for_openvpn.exe
    2014-08-29 10:45 - 2014-08-29 10:48 - 00577728 _____ (Firseria.-.Installer · sl) C:\Users\daveleonard\Downloads\Tor%20Browser%20Bundle.exe
    2014-08-29 10:40 - 2014-08-29 10:42 - 27281991 _____ () C:\Users\daveleonard\Downloads\torbrowser-install-3.6.4_en-US.exe
    2014-08-29 09:10 - 2014-08-29 09:10 - 00001084 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
    2014-08-29 09:10 - 2014-08-29 09:10 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\TeamViewer
    2014-08-29 09:10 - 2014-08-29 09:10 - 00000000 ____D () C:\Program Files\TeamViewer
    2014-08-29 08:51 - 2014-08-29 08:51 - 00000000 ____D () C:\Program Files\TAP-Windows
    2014-08-29 08:10 - 2014-05-17 10:33 - 00039624 _____ (AnchorFree Inc.) C:\Windows\system32\Drivers\hssdrv6.sys
    2014-08-28 14:28 - 2014-08-29 18:16 - 00000000 ____D () C:\Program Files\Hotspot Shield
    2014-08-28 14:27 - 2014-08-29 18:16 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Hotspot Shield
    2014-08-28 14:25 - 2014-08-29 19:59 - 00000224 ____H () C:\Windows\Tasks\SpotfluxLite.job
    2014-08-28 14:25 - 2014-08-29 14:41 - 00000244 ____H () C:\Windows\Tasks\spotfluxupdater.job
    2014-08-28 14:02 - 2014-08-28 14:02 - 00000000 ____D () C:\Program Files\Mozilla Firefox
    2014-08-28 13:30 - 2014-08-28 13:30 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\tor
    2014-08-28 10:53 - 2014-08-28 10:52 - 00000773 _____ () C:\Users\daveleonard\Desktop\Systen info.txt - Shortcut.lnk
    2014-08-28 10:22 - 2014-08-28 10:22 - 00000871 _____ () C:\Users\daveleonard\Desktop\wi-free.exe - Shortcut.lnk
    2014-08-28 10:17 - 2014-08-28 10:18 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wi-Free
    2014-08-28 10:15 - 2014-08-28 10:16 - 00810368 _____ (Wi-Free Limited) C:\Users\daveleonard\Downloads\install-wi-free-2.0-1356356928.exe
    2014-08-28 08:32 - 2014-08-28 08:34 - 06059896 _____ (OpenVPN Technologies) C:\Users\daveleonard\Downloads\privatetunnel-win-2.3.exe
    2014-08-27 09:07 - 2014-08-27 09:07 - 00000046 _____ () C:\Users\daveleonard\AppData\Roaming\WB.CFG
    2014-08-27 08:56 - 2014-08-29 11:19 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
    2014-08-27 08:56 - 2014-08-27 08:56 - 00001069 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
    2014-08-27 08:52 - 2014-08-27 08:55 - 22710720 _____ (Mozilla) C:\Users\daveleonard\Downloads\Firefox Setup 24.0.exe
    2014-08-27 08:07 - 2014-08-30 09:07 - 00000310 _____ () C:\Windows\Tasks\WSE_Astromenda.job
    2014-08-27 08:07 - 2014-08-27 08:08 - 00000000 ____D () C:\Program Files\SmarterPower
    2014-08-27 08:07 - 2014-08-27 08:07 - 02318496 _____ (Torch Media, Inc) C:\Users\daveleonard\Downloads\torch-browser-29.0.0.5165 [1].exe
    2014-08-27 07:22 - 2014-08-27 07:23 - 32367896 _____ () C:\Users\daveleonard\Downloads\Firefox Setup 31.0.exe
    2014-08-26 20:54 - 2014-08-26 20:54 - 00000000 ____D () C:\Windows\system32\Data
    2014-08-26 19:43 - 2014-08-27 13:02 - 00000000 ____D () C:\Users\Public\Documents\myrealgames
    2014-08-26 19:05 - 2014-08-26 19:05 - 00000594 ____H () C:\Users\daveleonard\Desktop\Start Tor Browser.exe - Shortcut.lnk
    2014-08-26 17:06 - 2014-08-26 18:19 - 296920585 _____ (My Real Games Ltd ) C:\Users\daveleonard\Downloads\jewel-quest-mysteries-2-trail-of-the-midnight-heart.exe
    2014-08-26 15:47 - 2014-08-26 15:50 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Super-Cow
    2014-08-26 15:46 - 2014-08-26 15:46 - 00000570 _____ () C:\Users\daveleonard\Desktop\Supercow.lnk
    2014-08-26 15:32 - 2014-08-26 15:46 - 30948253 _____ (My Real Games Ltd ) C:\Users\daveleonard\Downloads\supercow.exe
    2014-08-26 12:57 - 2014-08-26 12:57 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\FreemakeVideoConverter
    2014-08-26 12:56 - 2014-08-26 12:56 - 00000779 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk
    2014-08-26 12:42 - 2014-08-26 12:42 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\FreemakeVideoDownloader
    2014-08-26 12:41 - 2014-08-26 12:57 - 00000000 ____D () C:\Users\daveleonard\Documents\Freemake
    2014-08-26 12:41 - 2014-08-26 12:41 - 00000787 ____H () C:\Users\Public\Desktop\Freemake Video Downloader.lnk
    2014-08-26 12:41 - 2014-08-26 12:41 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
    2014-08-26 12:41 - 2014-08-26 12:41 - 00000000 ____D () C:\Program Files\WinPcap
    2014-08-26 12:35 - 2014-08-26 12:35 - 01269448 _____ (Ellora Assets Corporation ) C:\Users\daveleonard\Downloads\FreemakeVideoDownloaderSetup.exe
    2014-08-26 12:12 - 2014-08-26 12:15 - 09228880 _____ (Anvsoft, Inc. ) C:\Users\daveleonard\Downloads\ultraget-free.exe
    2014-08-26 12:07 - 2014-08-26 12:07 - 00000000 ____D () C:\Users\Public\Documents\Speedbit
    2014-08-26 12:06 - 2014-08-26 12:06 - 00000000 ____D () C:\Program Files\Common Files\SpeedBit
    2014-08-26 12:06 - 2014-08-26 12:05 - 00109696 _____ () C:\Windows\system32\EasyHook64.dll
    2014-08-26 12:06 - 2014-08-26 12:05 - 00091264 _____ () C:\Windows\system32\EasyHook32.dll
    2014-08-26 12:06 - 1998-12-05 13:18 - 00172032 _____ (Jin Hui E-mail: jinhui@jcomsoft.com Web: http://www.jcomsoft.com) C:\Windows\system32\AniGIF.ocx
    2014-08-26 12:03 - 2014-08-26 12:05 - 06465144 _____ () C:\Users\daveleonard\Downloads\svd3.exe
    2014-08-26 07:39 - 2014-08-26 07:40 - 23795824 _____ (APOWERSOFT LIMITED ) C:\Users\daveleonard\Downloads\video-download-capture.exe
    2014-08-24 15:34 - 2014-08-21 18:20 - 01364531 _____ () C:\Users\daveleonard\Desktop\AdwCleaner.exe
    2014-08-24 15:32 - 2014-08-29 11:18 - 00000000 ____D () C:\AdwCleaner
    2014-08-24 14:13 - 2014-08-24 14:14 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\CyberGhost
    2014-08-24 11:13 - 2014-08-24 12:04 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Magic Academy
    2014-08-24 11:05 - 2014-08-24 11:05 - 00000605 _____ () C:\Users\daveleonard\Desktop\Magic Academy.lnk
    2014-08-24 10:35 - 2014-08-24 11:02 - 19037548 _____ (My Real Games Ltd ) C:\Users\daveleonard\Downloads\magic-academy.exe
    2014-08-22 15:47 - 2014-08-22 15:47 - 00000000 ____D () C:\Users\daveleonard\Yahoo
    2014-08-21 17:22 - 2014-08-21 17:22 - 00001652 _____ () C:\Users\daveleonard\Desktop\ShouldIRemoveIt.exe - Shortcut.lnk
    2014-08-21 11:05 - 2014-08-21 11:09 - 08952624 _____ (Spotflux) C:\Users\daveleonard\Downloads\spotfluxlitedesktopv1exe.exe
    2014-08-21 09:48 - 2014-08-21 09:48 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\Opera Software
    2014-08-20 11:13 - 2014-08-21 17:11 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\FunkyFarm
    2014-08-20 11:02 - 2014-08-20 11:02 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\MysteryStudio
    2014-08-19 11:46 - 2014-08-19 11:46 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Meridian93
    2014-08-18 16:02 - 2014-08-18 16:02 - 00000000 ____D () C:\Users\Public\Documents\TheLostKingdomProphecy
    2014-08-18 15:41 - 2014-08-18 15:41 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Ladia Group
    2014-08-18 14:43 - 2014-08-21 17:01 - 00000613 _____ () C:\Users\daveleonard\Desktop\Mystery Of Unicorn Castle.lnk
    2014-08-18 14:40 - 2014-08-18 14:42 - 43535551 _____ (My Real Games Ltd ) C:\Users\daveleonard\Downloads\mystery-of-unicorn-castle.exe
    2014-08-18 09:38 - 2014-08-18 09:39 - 00000656 _____ () C:\Users\Leonard\Desktop\8 Kingdoms.lnk
    2014-08-18 09:38 - 2014-08-18 09:39 - 00000656 _____ () C:\Users\Guest\Desktop\8 Kingdoms.lnk
    2014-08-18 09:04 - 2014-08-21 17:15 - 00000000 ____D () C:\Program Files\IMKInformation
    2014-08-18 09:01 - 2014-08-18 09:01 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\Mindspark_Interactive_Net
    2014-08-17 08:02 - 2014-08-25 18:31 - 00000000 ____D () C:\Users\daveleonard\Documents\My Games
    2014-08-17 08:02 - 2014-08-17 12:28 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\0ad
    2014-08-17 08:02 - 2014-08-17 08:02 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\0ad
    2014-08-16 08:40 - 2014-08-16 08:40 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
    2014-08-16 08:40 - 2014-08-16 08:40 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
    2014-08-16 08:40 - 2014-08-16 08:40 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe
    2014-08-16 08:40 - 2014-08-16 08:40 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
    2014-08-16 08:40 - 2014-08-16 08:40 - 00000000 ____D () C:\Program Files\Common Files\Java
    2014-08-16 08:33 - 2014-08-16 08:35 - 29421992 _____ (Oracle Corporation) C:\Users\daveleonard\Downloads\jre-7u67-windows-i586.exe
    2014-08-16 08:18 - 2014-08-16 08:26 - 00918952 _____ (Oracle Corporation) C:\Users\daveleonard\Downloads\jxpiinstall.exe
    2014-08-15 14:36 - 2014-08-15 14:36 - 00000000 ____D () C:\Users\daveleonard\Documents\Blitz Media Player
    2014-08-15 14:20 - 2014-08-15 15:58 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\6383
    2014-08-15 14:16 - 2014-08-18 15:18 - 00001001 _____ () C:\Users\daveleonard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
    2014-08-15 14:14 - 2014-08-18 15:34 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\ospd_us_48
    2014-08-15 14:14 - 2014-08-15 14:14 - 00000000 ____D () C:\Program Files\ospd_us_48
    2014-08-13 17:10 - 2014-08-13 17:19 - 161656616 _____ (Widelands Development Team ) C:\Users\daveleonard\Downloads\widelands-build17-win32.exe
    2014-08-13 07:46 - 2014-07-01 06:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
    2014-08-13 07:46 - 2014-03-10 05:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
    2014-08-13 07:46 - 2014-03-10 05:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
    2014-08-13 07:45 - 2014-06-06 14:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
    2014-08-11 10:39 - 2014-08-13 08:34 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\.freeciv
    2014-08-11 10:19 - 2014-08-13 08:39 - 00009928 _____ () C:\Users\daveleonard\AppData\Roaming\.freeciv-client-rc-2.5
    2014-08-08 15:44 - 2014-08-08 15:44 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\Astar Games
    2014-08-07 08:00 - 2014-08-07 08:18 - 00000000 ____D () C:\Program Files\PRTG Network Monitor
    2014-08-05 13:10 - 2014-08-05 13:11 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\Microsoft Games
    2014-08-05 12:34 - 2014-08-05 12:34 - 00000988 _____ () C:\Users\Public\Desktop\VLC media player.lnk
    2014-08-02 07:16 - 2014-05-15 00:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
    2014-08-02 07:16 - 2014-05-15 00:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
    2014-08-02 07:15 - 2014-05-15 00:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
    2014-08-02 07:15 - 2014-05-15 00:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
    2014-08-02 07:15 - 2014-05-15 00:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
    2014-08-02 07:15 - 2014-05-15 00:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
    2014-08-02 07:15 - 2014-05-15 00:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
    2014-08-02 07:15 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
    2014-08-02 07:15 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2014-08-30 09:55 - 2014-08-30 09:53 - 00000000 ____D () C:\FRST
    2014-08-30 09:49 - 2014-08-30 08:46 - 00036015 _____ () C:\Users\daveleonard\Downloads\Result.txt
    2014-08-30 09:37 - 2014-05-15 15:23 - 00000896 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2014-08-30 09:37 - 2012-12-22 10:42 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
    2014-08-30 09:34 - 2014-08-30 09:27 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Tuneup Pro
    2014-08-30 09:32 - 2014-08-30 09:31 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
    2014-08-30 09:32 - 2013-11-06 16:27 - 00000884 _____ () C:\Windows\Tasks\EpicUpdateTaskUserS-1-5-21-4037858357-1239057611-1412149812-1000UA.job
    2014-08-30 09:31 - 2014-08-30 09:31 - 00000613 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
    2014-08-30 09:30 - 2014-08-30 09:30 - 00001879 _____ () C:\Users\daveleonard\Desktop\Sync Folder.lnk
    2014-08-30 09:30 - 2014-08-30 09:29 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\daveleonard\Downloads\mbam-setup-2.0.2.1012.exe
    2014-08-30 09:30 - 2014-08-30 09:29 - 00000000 ____D () C:\Program Files\MyPC Backup
    2014-08-30 09:29 - 2014-08-30 09:29 - 00001009 _____ () C:\Users\daveleonard\Desktop\MyPC Backup.lnk
    2014-08-30 09:29 - 2014-08-30 09:29 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
    2014-08-30 09:28 - 2014-08-30 09:28 - 00000276 _____ () C:\Windows\Tasks\Tuneup Pro_UPDATES.job
    2014-08-30 09:28 - 2014-08-30 09:28 - 00000268 _____ () C:\Windows\Tasks\Tuneup Pro_DEFAULT.job
    2014-08-30 09:13 - 2014-08-30 09:13 - 00001248 _____ () C:\Users\daveleonard\Desktop\MicrosoftFixit50466.msi - Shortcut.lnk
    2014-08-30 09:07 - 2014-08-27 08:07 - 00000310 _____ () C:\Windows\Tasks\WSE_Astromenda.job
    2014-08-30 08:59 - 2014-04-16 13:13 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\CrashDumps
    2014-08-30 08:45 - 2014-08-30 08:45 - 00401920 _____ (Farbar) C:\Users\daveleonard\Downloads\MiniToolBox.exe
    2014-08-30 08:43 - 2014-06-26 13:11 - 01781946 _____ () C:\Windows\WindowsUpdate.log
    2014-08-30 08:24 - 2014-04-16 09:55 - 00000884 __RSH () C:\Users\daveleonard\ntuser.pol
    2014-08-30 08:24 - 2013-11-26 19:42 - 00000000 ____D () C:\Users\daveleonard
    2014-08-30 08:24 - 2009-07-14 10:37 - 00000000 ____D () C:\Windows\tracing
    2014-08-29 20:05 - 2010-11-21 05:01 - 00785302 _____ () C:\Windows\system32\PerfStringBackup.INI
    2014-08-29 19:59 - 2014-08-29 11:20 - 00000168 _____ () C:\Windows\setupact.log
    2014-08-29 19:59 - 2014-08-28 14:25 - 00000224 ____H () C:\Windows\Tasks\SpotfluxLite.job
    2014-08-29 19:59 - 2014-05-15 15:23 - 00000892 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2014-08-29 19:59 - 2009-07-14 12:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2014-08-29 18:16 - 2014-08-29 11:19 - 00023190 _____ () C:\Windows\PFRO.log
    2014-08-29 18:16 - 2014-08-28 14:28 - 00000000 ____D () C:\Program Files\Hotspot Shield
    2014-08-29 18:16 - 2014-08-28 14:27 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Hotspot Shield
    2014-08-29 18:06 - 2014-08-29 15:36 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\Tbccint
    2014-08-29 18:06 - 2014-08-29 15:36 - 00000000 ____D () C:\Program Files\Tbccint
    2014-08-29 15:36 - 2014-08-29 15:34 - 00000009 _____ () C:\END
    2014-08-29 14:55 - 2014-08-29 14:55 - 00000628 _____ () C:\Users\Public\Desktop\OpenVPN GUI.lnk
    2014-08-29 14:41 - 2014-08-28 14:25 - 00000244 ____H () C:\Windows\Tasks\spotfluxupdater.job
    2014-08-29 11:20 - 2014-08-29 11:20 - 00000000 _____ () C:\Windows\setuperr.log
    2014-08-29 11:20 - 2009-07-14 12:33 - 00412464 _____ () C:\Windows\system32\FNTCACHE.DAT
    2014-08-29 11:19 - 2014-08-27 08:56 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
    2014-08-29 11:18 - 2014-08-24 15:32 - 00000000 ____D () C:\AdwCleaner
    2014-08-29 11:07 - 2014-08-29 11:07 - 00000000 ____D () C:\Program Files\OpenVPN
    2014-08-29 11:04 - 2014-08-29 11:04 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\CrashRpt
    2014-08-29 11:03 - 2014-08-29 11:02 - 00000000 ____D () C:\Users\daveleonard\OpenVPN
    2014-08-29 11:02 - 2014-08-29 11:02 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenVPN
    2014-08-29 10:58 - 2014-08-29 10:57 - 00367432 _____ () C:\Users\daveleonard\Downloads\SoftonicDownloader_for_openvpn.exe
    2014-08-29 10:58 - 2014-03-24 13:08 - 00000000 ___RD () C:\Users\Public
    2014-08-29 10:48 - 2014-08-29 10:45 - 00577728 _____ (Firseria.-.Installer · sl) C:\Users\daveleonard\Downloads\Tor%20Browser%20Bundle.exe
    2014-08-29 10:43 - 2014-03-29 08:29 - 00109280 _____ () C:\Users\daveleonard\AppData\Local\GDIPFONTCACHEV1.DAT
    2014-08-29 10:42 - 2014-08-29 10:40 - 27281991 _____ () C:\Users\daveleonard\Downloads\torbrowser-install-3.6.4_en-US.exe
    2014-08-29 09:10 - 2014-08-29 09:10 - 00001084 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
    2014-08-29 09:10 - 2014-08-29 09:10 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\TeamViewer
    2014-08-29 09:10 - 2014-08-29 09:10 - 00000000 ____D () C:\Program Files\TeamViewer
    2014-08-29 08:51 - 2014-08-29 08:51 - 00000000 ____D () C:\Program Files\TAP-Windows
    2014-08-28 14:02 - 2014-08-28 14:02 - 00000000 ____D () C:\Program Files\Mozilla Firefox
    2014-08-28 13:30 - 2014-08-28 13:30 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\tor
    2014-08-28 10:52 - 2014-08-28 10:53 - 00000773 _____ () C:\Users\daveleonard\Desktop\Systen info.txt - Shortcut.lnk
    2014-08-28 10:22 - 2014-08-28 10:22 - 00000871 _____ () C:\Users\daveleonard\Desktop\wi-free.exe - Shortcut.lnk
    2014-08-28 10:18 - 2014-08-28 10:17 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wi-Free
    2014-08-28 10:16 - 2014-08-28 10:15 - 00810368 _____ (Wi-Free Limited) C:\Users\daveleonard\Downloads\install-wi-free-2.0-1356356928.exe
    2014-08-28 08:34 - 2014-08-28 08:32 - 06059896 _____ (OpenVPN Technologies) C:\Users\daveleonard\Downloads\privatetunnel-win-2.3.exe
    2014-08-27 13:02 - 2014-08-26 19:43 - 00000000 ____D () C:\Users\Public\Documents\myrealgames
    2014-08-27 09:07 - 2014-08-27 09:07 - 00000046 _____ () C:\Users\daveleonard\AppData\Roaming\WB.CFG
    2014-08-27 08:56 - 2014-08-27 08:56 - 00001069 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
    2014-08-27 08:55 - 2014-08-27 08:52 - 22710720 _____ (Mozilla) C:\Users\daveleonard\Downloads\Firefox Setup 24.0.exe
    2014-08-27 08:08 - 2014-08-27 08:07 - 00000000 ____D () C:\Program Files\SmarterPower
    2014-08-27 08:07 - 2014-08-27 08:07 - 02318496 _____ (Torch Media, Inc) C:\Users\daveleonard\Downloads\torch-browser-29.0.0.5165 [1].exe
    2014-08-27 07:23 - 2014-08-27 07:22 - 32367896 _____ () C:\Users\daveleonard\Downloads\Firefox Setup 31.0.exe
    2014-08-26 20:54 - 2014-08-26 20:54 - 00000000 ____D () C:\Windows\system32\Data
    2014-08-26 19:05 - 2014-08-26 19:05 - 00000594 ____H () C:\Users\daveleonard\Desktop\Start Tor Browser.exe - Shortcut.lnk
    2014-08-26 18:19 - 2014-08-26 17:06 - 296920585 _____ (My Real Games Ltd ) C:\Users\daveleonard\Downloads\jewel-quest-mysteries-2-trail-of-the-midnight-heart.exe
    2014-08-26 15:50 - 2014-08-26 15:47 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Super-Cow
    2014-08-26 15:46 - 2014-08-26 15:46 - 00000570 _____ () C:\Users\daveleonard\Desktop\Supercow.lnk
    2014-08-26 15:46 - 2014-08-26 15:32 - 30948253 _____ (My Real Games Ltd ) C:\Users\daveleonard\Downloads\supercow.exe
    2014-08-26 13:09 - 2009-07-14 12:34 - 00020640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2014-08-26 13:09 - 2009-07-14 12:34 - 00020640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2014-08-26 12:57 - 2014-08-26 12:57 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\FreemakeVideoConverter
    2014-08-26 12:57 - 2014-08-26 12:41 - 00000000 ____D () C:\Users\daveleonard\Documents\Freemake
    2014-08-26 12:56 - 2014-08-26 12:56 - 00000779 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk
    2014-08-26 12:52 - 2013-11-27 09:39 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\vlc
    2014-08-26 12:42 - 2014-08-26 12:42 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\FreemakeVideoDownloader
    2014-08-26 12:41 - 2014-08-26 12:41 - 00000787 ____H () C:\Users\Public\Desktop\Freemake Video Downloader.lnk
    2014-08-26 12:41 - 2014-08-26 12:41 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
    2014-08-26 12:41 - 2014-08-26 12:41 - 00000000 ____D () C:\Program Files\WinPcap
    2014-08-26 12:35 - 2014-08-26 12:35 - 01269448 _____ (Ellora Assets Corporation ) C:\Users\daveleonard\Downloads\FreemakeVideoDownloaderSetup.exe
    2014-08-26 12:15 - 2014-08-26 12:12 - 09228880 _____ (Anvsoft, Inc. ) C:\Users\daveleonard\Downloads\ultraget-free.exe
    2014-08-26 12:07 - 2014-08-26 12:07 - 00000000 ____D () C:\Users\Public\Documents\Speedbit
    2014-08-26 12:06 - 2014-08-26 12:06 - 00000000 ____D () C:\Program Files\Common Files\SpeedBit
    2014-08-26 12:05 - 2014-08-26 12:06 - 00109696 _____ () C:\Windows\system32\EasyHook64.dll
    2014-08-26 12:05 - 2014-08-26 12:06 - 00091264 _____ () C:\Windows\system32\EasyHook32.dll
    2014-08-26 12:05 - 2014-08-26 12:03 - 06465144 _____ () C:\Users\daveleonard\Downloads\svd3.exe
    2014-08-26 07:40 - 2014-08-26 07:39 - 23795824 _____ (APOWERSOFT LIMITED ) C:\Users\daveleonard\Downloads\video-download-capture.exe
    2014-08-25 18:31 - 2014-08-17 08:02 - 00000000 ____D () C:\Users\daveleonard\Documents\My Games
    2014-08-24 14:14 - 2014-08-24 14:13 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\CyberGhost
    2014-08-24 13:02 - 2013-12-18 08:20 - 00000000 ____D () C:\Program Files\Spotflux
    2014-08-24 12:04 - 2014-08-24 11:13 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Magic Academy
    2014-08-24 11:05 - 2014-08-24 11:05 - 00000605 _____ () C:\Users\daveleonard\Desktop\Magic Academy.lnk
    2014-08-24 11:02 - 2014-08-24 10:35 - 19037548 _____ (My Real Games Ltd ) C:\Users\daveleonard\Downloads\magic-academy.exe
    2014-08-22 15:47 - 2014-08-22 15:47 - 00000000 ____D () C:\Users\daveleonard\Yahoo
    2014-08-21 18:20 - 2014-08-24 15:34 - 01364531 _____ () C:\Users\daveleonard\Desktop\AdwCleaner.exe
    2014-08-21 17:22 - 2014-08-21 17:22 - 00001652 _____ () C:\Users\daveleonard\Desktop\ShouldIRemoveIt.exe - Shortcut.lnk
    2014-08-21 17:15 - 2014-08-18 09:04 - 00000000 ____D () C:\Program Files\IMKInformation
    2014-08-21 17:11 - 2014-08-20 11:13 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\FunkyFarm
    2014-08-21 17:01 - 2014-08-18 14:43 - 00000613 _____ () C:\Users\daveleonard\Desktop\Mystery Of Unicorn Castle.lnk
    2014-08-21 11:09 - 2014-08-21 11:05 - 08952624 _____ (Spotflux) C:\Users\daveleonard\Downloads\spotfluxlitedesktopv1exe.exe
    2014-08-21 09:48 - 2014-08-21 09:48 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\Opera Software
    2014-08-20 19:17 - 2014-08-30 09:28 - 00017752 _____ () C:\Windows\system32\roboot.exe
    2014-08-20 11:57 - 2014-06-19 08:36 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Dashlane
    2014-08-20 11:02 - 2014-08-20 11:02 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\MysteryStudio
    2014-08-19 11:46 - 2014-08-19 11:46 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Meridian93
    2014-08-18 16:02 - 2014-08-18 16:02 - 00000000 ____D () C:\Users\Public\Documents\TheLostKingdomProphecy
    2014-08-18 15:41 - 2014-08-18 15:41 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Ladia Group
    2014-08-18 15:34 - 2014-08-15 14:14 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\ospd_us_48
    2014-08-18 15:34 - 2009-07-14 10:37 - 00000000 ____D () C:\Windows\Speech
    2014-08-18 15:18 - 2014-08-15 14:16 - 00001001 _____ () C:\Users\daveleonard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
    2014-08-18 14:42 - 2014-08-18 14:40 - 43535551 _____ (My Real Games Ltd ) C:\Users\daveleonard\Downloads\mystery-of-unicorn-castle.exe
    2014-08-18 09:39 - 2014-08-18 09:38 - 00000656 _____ () C:\Users\Leonard\Desktop\8 Kingdoms.lnk
    2014-08-18 09:39 - 2014-08-18 09:38 - 00000656 _____ () C:\Users\Guest\Desktop\8 Kingdoms.lnk
    2014-08-18 09:35 - 2009-07-14 10:37 - 00000000 ____D () C:\Windows\Microsoft.NET
    2014-08-18 09:01 - 2014-08-18 09:01 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\Mindspark_Interactive_Net
    2014-08-17 12:28 - 2014-08-17 08:02 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\0ad
    2014-08-17 08:02 - 2014-08-17 08:02 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\0ad
    2014-08-16 08:40 - 2014-08-16 08:40 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
    2014-08-16 08:40 - 2014-08-16 08:40 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
    2014-08-16 08:40 - 2014-08-16 08:40 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe
    2014-08-16 08:40 - 2014-08-16 08:40 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
    2014-08-16 08:40 - 2014-08-16 08:40 - 00000000 ____D () C:\Program Files\Common Files\Java
    2014-08-16 08:35 - 2014-08-16 08:33 - 29421992 _____ (Oracle Corporation) C:\Users\daveleonard\Downloads\jre-7u67-windows-i586.exe
    2014-08-16 08:26 - 2014-08-16 08:18 - 00918952 _____ (Oracle Corporation) C:\Users\daveleonard\Downloads\jxpiinstall.exe
    2014-08-15 15:58 - 2014-08-15 14:20 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\6383
    2014-08-15 14:36 - 2014-08-15 14:36 - 00000000 ____D () C:\Users\daveleonard\Documents\Blitz Media Player
    2014-08-15 14:14 - 2014-08-15 14:14 - 00000000 ____D () C:\Program Files\ospd_us_48
    2014-08-15 12:30 - 2009-07-14 10:37 - 00000000 ____D () C:\Windows\rescache
    2014-08-15 10:15 - 2012-12-22 10:42 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
    2014-08-15 10:15 - 2012-12-22 10:42 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
    2014-08-13 17:44 - 2014-05-15 15:27 - 00002089 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
    2014-08-13 17:19 - 2014-08-13 17:10 - 161656616 _____ (Widelands Development Team ) C:\Users\daveleonard\Downloads\widelands-build17-win32.exe
    2014-08-13 08:39 - 2014-08-11 10:19 - 00009928 _____ () C:\Users\daveleonard\AppData\Roaming\.freeciv-client-rc-2.5
    2014-08-13 08:34 - 2014-08-11 10:39 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\.freeciv
    2014-08-13 07:51 - 2013-12-17 13:10 - 00000000 ____D () C:\Windows\system32\MRT
    2014-08-13 07:47 - 2013-12-17 13:09 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2014-08-08 15:44 - 2014-08-08 15:44 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\Astar Games
    2014-08-07 08:18 - 2014-08-07 08:00 - 00000000 ____D () C:\Program Files\PRTG Network Monitor
    2014-08-05 13:11 - 2014-08-05 13:10 - 00000000 ____D () C:\Users\daveleonard\AppData\Local\Microsoft Games
    2014-08-05 12:34 - 2014-08-05 12:34 - 00000988 _____ () C:\Users\Public\Desktop\VLC media player.lnk
    2014-08-05 09:20 - 2012-12-18 20:52 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
    2014-08-03 16:17 - 2014-04-16 09:51 - 00000000 ____D () C:\Users\daveleonard\AppData\Roaming\Spotflux

    Some content of TEMP:
    ====================
    C:\Users\daveleonard\AppData\Local\Temp\conduitinstaller.exe
    C:\Users\daveleonard\AppData\Local\Temp\OnlineBackup.exe
    C:\Users\daveleonard\AppData\Local\Temp\Quarantine.exe
    C:\Users\daveleonard\AppData\Local\Temp\Softonic_EN_1-5-11_EN-Production_10_CleanRelease.exe


    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => MD5 is legit
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2014-08-27 10:51

    ==================== End Of Log ============================
     

    Attached Files:

    Last edited by a moderator: Aug 30, 2014
    daveleonard, Aug 29, 2014
    #1
  3. starbuck

    starbuck Rest In Peace Pete Administrator

    Joined:
    Sep 26, 2009
    Messages:
    3,830
    Location:
    Midlands, UK
    Operating System:
    Windows 10
    CPU:
    AMD Athlon II x2 250 Processor 3.00GHz
    Memory:
    8gb DDR3
    Hard Drive:
    500gb SATA
    Graphics Card:
    ASUS GeForce GTX 960 2gb
    Power Supply:
    650w PowerCool X-Viper
    Hi Dave,

    I have split the reports away from the original thread and started a new topic here for you.
    Thanks for the reports.
    I have edited some of them in to your post as it's a lot easier to read them this way.
    Unfortunately there is one missing.
    Could you please post the Addition.txt from FRST.
    It will have been saved in the same location that FRST was run from:
    What ever it was that was being flagged by Avast will have been removed once the folder was removed.
    But that doesn't mean that the cause of the file being there in the first place has been addressed.... that's the reason for these scans.

    Thanks
     
    starbuck, Aug 30, 2014
    #2
  4. daveleonard

    daveleonard Registered Members

    Joined:
    Dec 2, 2013
    Messages:
    417
    Operating System:
    Windows 10
    Computer Brand or Motherboard:
    Acer Aspire
    CPU:
    See below
    Memory:
    Ditto
    Hard Drive:
    Ditto
    Graphics Card:
    Ditto
    Power Supply:
    Ditto
    Ok yes Starbuck I did find the addition.txt and will attach it here. Thanks

    Additional scan result of Farbar Recovery Scan Tool (x86) Version:29-08-2014 01
    Ran by daveleonard at 2014-08-30 09:55:56
    Running from D:\
    Boot Mode: Normal
    ==========================================================


    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Microsoft Security Essentials (Disabled - Up to date) {3F839487-C7A2-C958-E30C-E2825BA31FB5}
    AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
    AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
    AS: Microsoft Security Essentials (Disabled - Up to date) {84E27563-E198-C6D6-D9BC-D9F020245508}

    ==================== Installed Programs ======================

    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    Adobe Flash Player 14 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
    Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.179 - Adobe Systems Incorporated)
    Adobe Reader XI (11.0.08) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
    avast! Free Antivirus (HKLM\...\avast) (Version: 9.0.2021 - AVAST Software)
    File Shredder 2.5 (HKLM\...\File Shredder_is1) (Version: - Pow Tools)
    Freemake Video Converter version 4.1.4 (HKLM\...\Freemake Video Converter_is1) (Version: 4.1.4 - Ellora Assets Corporation)
    Freemake Video Downloader (HKLM\...\Freemake Video Downloader_is1) (Version: 3.7.0 - Ellora Assets Corporation)
    G4FON Koch Method Morse Trainer (HKLM\...\G4FON Koch Method Morse Trainer) (Version: - )
    Google Chrome (HKLM\...\Google Chrome) (Version: 36.0.1985.143 - Google Inc.)
    Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
    Intel(R) Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
    Java 7 Update 65 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.650 - )
    Java 7 Update 67 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
    Java Auto Updater (Version: 2.1.67.1 - Oracle, Inc.) Hidden
    JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
    Just Learn Morse Code (HKLM\...\{CBE3B17D-C988-4AF7-B84E-BEFF6F60BCC9}) (Version: 1.0.0.0 - Sigurd Stenersen)
    Learning Essentials for Microsoft Office (HKLM\...\{75F3A4B2-F6E8-434D-A2EF-DBBC016C6CB2}) (Version: 2.0 - Microsoft)
    Magic Academy (HKLM\...\Magic Academy_is1) (Version: - My Real Games Ltd)
    Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
    Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
    Microsoft Office Access MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
    Microsoft Office Enterprise 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office Excel MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office Groove MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office Groove Setup Metadata MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office InfoPath MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office Proof (French) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office Proof (Spanish) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office Shared MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Office Word MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
    Microsoft Student 2007 for Learning Essentials (HKLM\...\{Microsoft Student 2007_54A0E938-8390-489F-8F1A-563673334DFE}) (Version: - )
    Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{86CE1746-9EFF-3C9C-8755-81EA8903AC34}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Mozilla Firefox 31.0 (x86 en-US) (HKLM\...\Mozilla Firefox 31.0 (x86 en-US)) (Version: 31.0 - Mozilla)
    Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla)
    MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
    MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
    MyPC Backup (HKLM\...\MyPC Backup) (Version: - JDi Backup Ltd) <==== ATTENTION
    Mystery Of Unicorn Castle (HKLM\...\Mystery Of Unicorn Castle_is1) (Version: - My Real Games Ltd)
    OneSoftPerDay 025.48 (HKLM\...\ospd_us_48_is1) (Version: - ONESOFTPERDAY)
    OpenVPN 2.3.2-I003 (HKLM\...\OpenVPN) (Version: 2.3.2-I003 - )
    Privacy Mantra 3.00 (HKLM\...\Privacy Mantra 3.00) (Version: - )
    RealDownloader (Version: 17.0.9 - RealNetworks, Inc.) Hidden
    RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
    RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
    RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
    Recuva (HKLM\...\Recuva) (Version: 1.50 - Piriform)
    Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
    Should I Remove It (HKCU\...\Should I Remove It 1.0.4) (Version: 1.0.4 - Reason Software Company Inc.)
    Should I Remove It (Version: 1.0.4 - Reason Software Company Inc.) Hidden
    Smart Bro (HKLM\...\Smart Bro) (Version: 11.300.05.05.238 - Huawei Technologies Co.,Ltd)
    SMART BRO Hostless Modem (HKLM\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.2 - ZTE Corporation)
    SmarterPower (HKLM\...\SmarterPower) (Version: 2014.08.07.212505 - SmarterPower)
    Spotflux Lite (HKLM\...\Spotflux Lite 1.0) (Version: 1.0 - Spotflux)
    Spotflux Lite (Version: 1.0 - Spotflux) Hidden
    Supercow (HKLM\...\Supercow_is1) (Version: - My Real Games Ltd)
    System Requirements Lab for Intel (HKLM\...\{C7CA731B-BF9A-46D9-92CF-8A8737AE9240}) (Version: 4.5.13.0 - Husdawg, LLC)
    TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
    TeamViewer 9 (HKLM\...\TeamViewer 9) (Version: 9.0.31064 - TeamViewer)
    Unity Web Player (HKCU\...\UnityWebPlayer) (Version: 4.5.2f1 - Unity Technologies ApS)
    UpdateService (Version: 1.0.0 - RealNetworks, Inc.) Hidden
    VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
    Wi-Free (HKLM\...\Wi-Free) (Version: - MMC Networks Limited)
    WinPcap 4.1.2 (HKLM\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)

    ==================== Custom CLSID (selected items): ==========================

    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

    CustomCLSID: HKU\S-1-5-21-4037858357-1239057611-1412149812-1090_Classes\CLSID\{085C3A71-18C5-4FB5-8F2B-62CF7474FFE5}\localserver32 -> "C:\Users\daveleonard\AppData\Local\Epic Privacy Browser\Update\1.3.27.13\EpicUpdateOnDemand.exe" No (the data entry has 5 more characters).
    CustomCLSID: HKU\S-1-5-21-4037858357-1239057611-1412149812-1090_Classes\CLSID\{1BBF13E0-551E-42DD-91F4-1A547443FFDA}\InprocServer32 -> C:\Users\daveleonard\AppData\Local\Tbccint\Community Alerts\Alert.dll (ClientConnect Ltd.)
    CustomCLSID: HKU\S-1-5-21-4037858357-1239057611-1412149812-1090_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\daveleonard\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
    CustomCLSID: HKU\S-1-5-21-4037858357-1239057611-1412149812-1090_Classes\CLSID\{6959B6E8-B5E0-4E64-B1B4-C82969BAF394}\InprocServer32 -> C:\Users\daveleonard\AppData\Local\Epic Privacy Browser\Update\1.3.27.13\psuser.dll No File
    CustomCLSID: HKU\S-1-5-21-4037858357-1239057611-1412149812-1090_Classes\CLSID\{84D964EE-0441-4A42-8146-0699AE05DDC3}\InprocServer32 -> C:\Users\daveleonard\AppData\Local\Epic Privacy Browser\Update\1.3.27.13\psuser.dll No File
    CustomCLSID: HKU\S-1-5-21-4037858357-1239057611-1412149812-1090_Classes\CLSID\{9B8ABA14-0F6A-492C-AB9D-41FA1F7EC450}\localserver32 -> "C:\Users\daveleonard\AppData\Local\Epic Privacy Browser\Update\1.3.27.13\EpicUpdateOnDemand.exe" No (the data entry has 5 more characters).
    CustomCLSID: HKU\S-1-5-21-4037858357-1239057611-1412149812-1090_Classes\CLSID\{9C3B9AB7-2486-4403-B138-E9ED32DD063C}\localserver32 -> "C:\Users\daveleonard\AppData\Local\Epic Privacy Browser\Update\1.3.27.13\EpicUpdateOnDemand.exe" No (the data entry has 5 more characters).
    CustomCLSID: HKU\S-1-5-21-4037858357-1239057611-1412149812-1090_Classes\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}\localserver32 -> "C:\Users\daveleonard\AppData\Local\Torch\Application\33.0.0.7703\delegate_execute.exe" No File
    CustomCLSID: HKU\S-1-5-21-4037858357-1239057611-1412149812-1090_Classes\CLSID\{AB3B8CD0-9085-4F26-B16B-02571A12A789}\localserver32 -> "C:\Users\daveleonard\AppData\Local\Epic Privacy Browser\Update\EpicUpdate.exe" No File
    CustomCLSID: HKU\S-1-5-21-4037858357-1239057611-1412149812-1090_Classes\CLSID\{C5135FC3-396E-4AFB-974F-D7A91D15CCCA}\InprocServer32 -> C:\Users\daveleonard\AppData\Local\Epic Privacy Browser\Update\1.3.27.13\npEpicUpdate3.dll No File
    CustomCLSID: HKU\S-1-5-21-4037858357-1239057611-1412149812-1090_Classes\CLSID\{D9A13C52-6B85-4E00-B98A-DF25F77CBBEA}\localserver32 -> "C:\Users\daveleonard\AppData\Local\Epic Privacy Browser\Update\1.3.27.13\EpicUpdateOnDemand.exe" No (the data entry has 5 more characters).
    CustomCLSID: HKU\S-1-5-21-4037858357-1239057611-1412149812-1090_Classes\CLSID\{F86DEB4A-8D78-4C57-8872-D2730ED051EF}\InprocServer32 -> C:\Users\daveleonard\AppData\Local\Epic Privacy Browser\Update\1.3.27.13\npEpicUpdate3.dll No File

    ==================== Restore Points =========================

    27-08-2014 05:29:43 Revo Uninstaller's restore point - Jewel Quest Mysteries 2 Trail of the Midnight Heart
    28-08-2014 00:22:53 Revo Uninstaller's restore point - Hotspot Shield 3.42
    28-08-2014 00:35:16 Device Driver Package Install: TAP Provider V9 for Private Tunnel Network adapters
    28-08-2014 02:08:17 Revo Uninstaller's restore point - Spotflux Lite
    28-08-2014 02:18:33 Device Driver Package Install: TAP-Win32 Provider V9 Network adapters
    28-08-2014 06:17:40 Revo Uninstaller's restore point - OpenVPN 2.3.2-I003
    28-08-2014 06:19:55 Revo Uninstaller's restore point - PrivateTunnel
    29-08-2014 03:03:00 Device Driver Package Install: TAP-Win32 Provider Network adapters
    29-08-2014 03:11:06 Revo Uninstaller's restore point - Softonic for Windows
    29-08-2014 07:30:02 Revo Uninstaller's restore point - Hotspot Shield 3.42
    29-08-2014 10:00:41 Revo Uninstaller's restore point - Hotspot Shield Toolbar for IE
    29-08-2014 10:04:39 Revo Uninstaller's restore point - Hotspot Shield Toolbar for IE
    29-08-2014 10:07:45 Revo Uninstaller's restore point - Hotspot Shield 3.42
    30-08-2014 01:10:40 Installed Microsoft Fix it 50466
    30-08-2014 01:33:17 Revo Uninstaller's restore point - Tuneup Pro

    ==================== Hosts content: ==========================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-14 10:04 - 2009-06-11 05:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

    ==================== Scheduled Tasks (whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

    Task: {016BB7F9-3C94-44A4-AC0F-C9BEFD8A6CE3} - System32\Tasks\SpotfluxLite => D:\Partner\SpotfluxLiteClient.exe [2014-02-06] (Spotflux)
    Task: {01FF7F6D-EA49-40C0-A088-50AFBBCDB14C} - System32\Tasks\{643D9C15-AD70-4D2E-89BA-917B179E7E4D} => Firefox.exe
    Task: {025FC46A-E6C0-43E1-9BA2-FCEC0EF95D75} - System32\Tasks\SoftwareInformerService => H:\Software Informer\softinfo.exe
    Task: {046B51F3-B193-499D-854C-DECF24F0FF66} - System32\Tasks\{8EECE116-4953-494B-B836-259A81D3E2AE} => C:\Users\daveleonard\AppData\Roaming\Dashlane\Dashlane.exe
    Task: {056741FC-A60C-47ED-BBB0-3AD2E8CCBA60} - System32\Tasks\{EEF4EAF1-CE32-44A4-B2A1-BABFD74F8CE3} => Chrome.exe
    Task: {066E1AA5-88EC-4E88-B7DC-0302BC466AB3} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4037858357-1239057611-1412149812-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
    Task: {0D36DF58-6558-495D-8423-D1A3DC7FC9F1} - System32\Tasks\Tuneup Pro_DEFAULT => C:\Program Files\Tuneup Pro\TuneupPro.exe
    Task: {0E57F6AE-A729-4769-A803-B0EEF55613B8} - System32\Tasks\spotfluxupdater => D:\Partner\Spotflux Updates.exe [2014-02-06] (Spotflux)
    Task: {0FCC8DDE-1D9A-4E87-9307-DEE5453589DA} - System32\Tasks\{382E0B43-A968-4780-B1E4-D4CA0BBF9056} => Firefox.exe
    Task: {1233FBF4-DB0C-429D-8651-4BB2FB55FDBA} - System32\Tasks\{C0638C19-BDE7-482C-AE8B-CA8839FF158D} => D:\Tor Browser\Start Tor Browser.exe [2000-01-01] ()
    Task: {12547EB5-94B2-4852-B3A7-DAAF9019233D} - System32\Tasks\{AD40E115-BB15-46AF-8D24-4B6DEFF1D219} => C:\Program Files\Hotspot Shield\bin\HSSCP.exe
    Task: {13C79A86-2A90-43AF-BDD2-E6BD2C90F5D3} - System32\Tasks\{F49F3F17-7CBD-4BDC-A9CE-CDD47955DF8D} => C:\Users\daveleonard\AppData\Roaming\Dashlane\Dashlane.exe
    Task: {160A5E5A-4662-4329-BAD2-33A835BBD944} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-4037858357-1239057611-1412149812-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
    Task: {18708595-CE03-43C6-8DC9-015A38BAD76B} - System32\Tasks\EpicUpdateTaskUserS-1-5-21-4037858357-1239057611-1412149812-1000UA => C:\Users\user\AppData\Local\Epic\Update\EpicUpdate.exe
    Task: {194B7799-5361-47E8-9588-65DA2BC9309E} - System32\Tasks\{2D38F4EA-F14A-4759-A924-A9AFD09384EB} => C:\Program Files\Smart Bro\Smart Bro.exe [2013-10-15] ()
    Task: {1E38B7B9-AF38-4B7A-9FFB-5824B0CC54C5} - System32\Tasks\{C65E5835-5E6D-43B4-8B67-A36F80CBA093} => C:\Program Files\MP3 Rocket\MP3Rocket.exe
    Task: {1E896DC6-3A0F-4840-8EF3-B3F1F71CD025} - System32\Tasks\{5C2FDA7D-1158-41FF-9A3B-645635DD347A} => Chrome.exe
    Task: {215E9B54-E7F7-42B3-9256-79D8D6498794} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-4037858357-1239057611-1412149812-1000 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
    Task: {2280A23C-70BF-4FF2-A465-DE7BD98C7996} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
    Task: {22CF5BA9-B3C0-4819-8C07-132664865E27} - System32\Tasks\{111C379A-A2D7-4C57-8354-26504CEACAD7} => Chrome.exe
    Task: {25ACACC5-A239-40B5-A60E-76AC1A251932} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-4037858357-1239057611-1412149812-1090 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
    Task: {2FF19C30-1651-48F0-9898-21FE42567C22} - System32\Tasks\LaunchSignup => C:\Program Files\MyPC Backup\Signup Wizard.exe [2014-08-27] (MyPC Backup) <==== ATTENTION
    Task: {341D7A46-26B3-42C3-B9B0-858E4A898360} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4037858357-1239057611-1412149812-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
    Task: {3935011A-2FFA-4448-971B-00E16644FB46} - System32\Tasks\{13599739-3B42-4BE4-8BDC-5EE726A93895} => Chrome.exe
    Task: {49BD5564-BA0A-4E8A-A7E1-4F0F5135B41D} - System32\Tasks\{D3B46AB7-E4A2-45FA-B999-184BF621E6E9} => C:\Program Files\Hotspot Shield\bin\HSSCP.exe
    Task: {4C2F7066-D757-45F7-8D3F-A640B3022431} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-18] (AVAST Software)
    Task: {4EB45C97-447F-4438-A56C-59D3FCEF1221} - System32\Tasks\{590B1133-E111-4418-93E2-46D8B28E864F} => D:\Tor Browser\Start Tor Browser.exe [2000-01-01] ()
    Task: {4F3A493C-8AC8-4D57-8F23-5C371B25BC89} - System32\Tasks\{D66F980B-13F5-4B84-9AAD-1EDCBDDBAB65} => Chrome.exe
    Task: {50F01694-DEA8-4D74-8EBC-ED155AE8C285} - System32\Tasks\{74960038-3BA0-46D5-8EED-9661758F8687} => Firefox.exe
    Task: {51C13B42-A66E-4675-AFBF-43AB52EADCF2} - System32\Tasks\Opera scheduled Autoupdate 1397609560 => H:\Opera\launcher.exe
    Task: {54E506B0-E25F-4EF1-8133-D474422C9ACA} - System32\Tasks\{917E18E4-487A-45E0-8F3E-65F6EC894B9F} => C:\Program Files\Smart Bro\Smart Bro.exe [2013-10-15] ()
    Task: {57E3A171-EF7F-457D-BA5F-06BCD1537849} - System32\Tasks\{E0ADEB7C-4987-42B6-BE1A-381B41822ECE} => Chrome.exe
    Task: {5EBC9201-71DD-46C3-8D63-985B7726EC7F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-05-15] (Google Inc.)
    Task: {5ECA52E7-AD72-48D4-AB61-31154585AAA0} - System32\Tasks\TweakBit\PCSpeedUp\Start PCSpeedUp оn logon => C:\Program Files\TweakBit\PCSpeedUp\PCSpeedUp.exe
    Task: {7469700C-AFA1-48F6-AE86-1B235E7448CB} - System32\Tasks\EpicUpdateTaskUserS-1-5-21-4037858357-1239057611-1412149812-1000Core => C:\Users\user\AppData\Local\Epic\Update\EpicUpdate.exe
    Task: {7A83522A-6D17-4454-94DF-12958A855154} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-4037858357-1239057611-1412149812-1090 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
    Task: {7CCB8E0A-6C2E-409A-8A7D-16A62112715B} - System32\Tasks\{4B2A9CC9-03E6-45E6-8202-400B8D04D404} => Chrome.exe
    Task: {7DAF857F-A2CD-42DA-BD6E-66E4AC1680EE} - System32\Tasks\{E92E3DFD-C48C-4687-A2C0-D4B7050305A0} => C:\Program Files\Smart Bro\Smart Bro.exe [2013-10-15] ()
    Task: {88940F7F-FE46-4388-A1E9-C603D044B468} - System32\Tasks\{0D6D216C-B69C-442F-86DB-5B24E94F97A3} => Chrome.exe
    Task: {8CA7C541-3E07-49B3-8694-E7E4A395B5B8} - System32\Tasks\{CA9EE889-7E7B-44E4-BE05-E177858D6F25} => C:\Program Files\Hotspot Shield\bin\HSSCP.exe
    Task: {8CC1DE3A-C7A2-4224-AA9C-55FE8674531B} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-4037858357-1239057611-1412149812-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
    Task: {8F55DC22-5ECB-43CE-8007-794AA0434845} - System32\Tasks\{CEC28F45-1F24-437E-9ED1-A446126E11FE} => Firefox.exe
    Task: {96144F73-2A82-4C20-99CC-9846C9F63CE5} - System32\Tasks\{B0D49B95-F09F-47B1-80A6-902545D972DA} => C:\Program Files\Hotspot Shield\bin\HSSCP.exe
    Task: {9672D53C-1255-46FE-9572-1293C55EF52E} - System32\Tasks\{4F894E55-9D3F-4C38-A8D9-290BEDB6F32D} => Firefox.exe
    Task: {97FB13CD-3D42-4206-BD79-D16F2DE4BD77} - System32\Tasks\{67814C09-1D44-4970-9DB4-A9C4F7622BB8} => Chrome.exe
    Task: {9A367637-7FA9-4940-974A-FF336ACED341} - System32\Tasks\{51AA3F09-3402-4FA9-994C-74B443CCB027} => C:\Program Files\Hostless Modem\SMART BRO\LaunchWebUI.exe [2012-10-19] ()
    Task: {9B211615-E273-4F5D-A6FC-3C70E4312208} - System32\Tasks\Tuneup Pro => C:\Program Files\Tuneup Pro\TuneupPro.exe
    Task: {9B7908B7-96B1-48A5-94E8-4151EB378C95} - System32\Tasks\{473CAFFE-A8E9-4E07-A271-3C8532E49162} => C:\Program Files\Hotspot Shield\bin\HSSCP.exe
    Task: {A3C629A5-3AE4-4F2B-ADAE-65317D0A8DB7} - System32\Tasks\Maxthon Update => H:\Bin\mxup.exe
    Task: {A8E37BB0-2F41-425A-9985-A04C1FF6BBEE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-15] (Adobe Systems Incorporated)
    Task: {A91A4ED4-738E-49DD-B5EF-0D885A40F33E} - System32\Tasks\{AAFF1E23-54E2-4689-8B98-4DE0B5CD9CB7} => Firefox.exe
    Task: {A9A8DE48-0151-4102-90A2-C1EEFE98A3BE} - System32\Tasks\{E2036907-2670-4C0E-A0B2-26F593D9BF4B} => Chrome.exe
    Task: {AA577232-10CD-40A2-92B4-A581A959E33B} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4037858357-1239057611-1412149812-1090 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
    Task: {AF8A12ED-B002-4366-8A28-72B082B019FD} - System32\Tasks\{568DD3A5-5A3D-47F1-A81B-759B53B24588} => C:\Program Files\Hotspot Shield\bin\HSSCP.exe
    Task: {B69FC4BA-585B-4D46-9E49-9E0DD4823A22} - System32\Tasks\{C2313156-C873-4855-BF43-8C4C39AF9CDD} => Chrome.exe
    Task: {B9AB0E54-4CE8-41B3-97E9-5A6E381E1E35} - System32\Tasks\{6360BAFA-045D-4B09-ADE3-0B715B41E743} => C:\Program Files\Smart Bro\Smart Bro.exe [2013-10-15] ()
    Task: {BA8879FB-A53C-4320-871D-60FF9355A010} - System32\Tasks\WSE_Astromenda => C:\Users\DAVELE~1\AppData\Roaming\WSE_AS~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
    Task: {BB6D6865-48D1-4C92-A778-5CF3DD01ACAD} - System32\Tasks\{8427D8CC-FE03-4F70-8208-BCA1A571DE27} => Chrome.exe
    Task: {BFE9A789-FA12-4A61-83C4-191FAE5B3F9B} - System32\Tasks\{9C50B4E2-D54A-4858-ACFE-F1E12DD42132} => Chrome.exe
    Task: {C4468BD5-63F8-4AC9-AA6E-FE65F512B472} - System32\Tasks\{1C88D52D-BCC1-44F0-87FC-F9DF2A5970F6} => C:\Program Files\Smart Bro\Smart Bro.exe [2013-10-15] ()
    Task: {C860D97F-FA08-4F14-B2FA-82F391F4BF91} - System32\Tasks\{72AE7736-5B0E-4B3C-8DAC-83C03BBB42AE} => Chrome.exe
    Task: {CB66C55E-0AF4-4ABE-A2BE-0451EDBA6853} - System32\Tasks\{1A627ECC-9CE4-4027-8AB0-374ABCB5961A} => C:\Program Files\Free USB Disk Security\USBSecurity.exe
    Task: {CB91BEE9-56B0-489B-9A56-CCB0D158E257} - System32\Tasks\{B636CEE8-AB37-4373-8178-3BB8BB2E7DE0} => C:\Users\daveleonard\Downloads\JRE win i586.exe
    Task: {D61009DE-C8AA-47CD-9F1F-446A2639F88E} - System32\Tasks\{11015A2C-1A02-48E8-A923-F7A6B710C02E} => C:\Program Files\Smart Bro\Smart Bro.exe [2013-10-15] ()
    Task: {D71BFEF0-0088-4014-A2D9-F03D290E601A} - System32\Tasks\{B84DF502-64D7-4021-918D-E11623C95039} => C:\Program Files\Smart Bro\Smart Bro.exe [2013-10-15] ()
    Task: {D7A77A93-DC75-45F7-8B12-8678077F40CB} - System32\Tasks\{2FC1FF99-8DD8-4054-A077-9D4CB2877353} => Chrome.exe
    Task: {DD26CA69-E758-4ECD-88F1-F169676DFBEE} - System32\Tasks\{4C25F1FB-BA7B-4B20-AD96-075694FE4EDA} => C:\Program Files\Hotspot Shield\bin\HSSCP.exe
    Task: {DEAC5226-F61C-4B5C-AA0C-F56C4640CADB} - System32\Tasks\{2E80D866-BED8-4D30-A182-0D9284AC84F1} => C:\Program Files\Smart Bro\Smart Bro.exe [2013-10-15] ()
    Task: {E1D79FE2-B337-4504-BD97-1D3362E21C30} - System32\Tasks\{294230E0-1D68-461F-9453-2B69FEAD5E16} => C:\Program Files\Smart Bro\Smart Bro.exe [2013-10-15] ()
    Task: {E37BE898-A642-4139-B3CF-0877A55B2ED6} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4037858357-1239057611-1412149812-1090 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
    Task: {E442DBE2-41E3-4B0E-82C2-F15176B2495A} - System32\Tasks\{16F8BDF0-397D-4523-B1D8-04B0A9CFFBAA} => C:\Users\daveleonard\AppData\Roaming\Dashlane\Dashlane.exe
    Task: {EA02FDFB-01F6-4030-A210-623D48C504C0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-05-15] (Google Inc.)
    Task: {EAF4B6D8-71FE-4CB1-A7AA-E69E23340BC4} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-4037858357-1239057611-1412149812-1090 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
    Task: {EC9D11BC-ECD8-4A73-9FBE-678D9E1D8E9B} - System32\Tasks\{F168204E-8AB3-4415-85A2-1E718D709899} => C:\Program Files\Smart Bro\Smart Bro.exe [2013-10-15] ()
    Task: {F0A85942-7396-4630-B8DA-1D9CDD1EBF35} - System32\Tasks\{ACCF7275-F6A7-46DC-898C-EA8A9B052335} => C:\Users\daveleonard\Downloads\JRE win i586.exe
    Task: {F14D9034-224F-4CA4-A83C-3FFF5D776CF9} - System32\Tasks\{C54F8338-32E5-4A9C-B632-D506B51C1470} => C:\Program Files\Hotspot Shield\bin\HSSCP.exe
    Task: {FBB9BAAD-4FA1-43FC-8A06-5B1EC2D055BE} - System32\Tasks\{820FEC6B-3769-4C17-B443-C6D8540061D1} => Chrome.exe
    Task: {FF996216-32AB-4FAB-9420-23822B584892} - System32\Tasks\Tuneup Pro_UPDATES => C:\Program Files\Tuneup Pro\TuneupPro.exe

    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\EpicUpdateTaskUserS-1-5-21-4037858357-1239057611-1412149812-1000UA.job => C:\Users\user\AppData\Local\Epic\Update\EpicUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\SpotfluxLite.job => D:\Partner\SpotfluxLiteClient.exe
    Task: C:\Windows\Tasks\spotfluxupdater.job => D:\Partner\Spotflux Updates.exe
    Task: C:\Windows\Tasks\Tuneup Pro_DEFAULT.job => C:\Program Files\Tuneup Pro\TuneupPro.exe
    Task: C:\Windows\Tasks\Tuneup Pro_UPDATES.job => C:\Program Files\Tuneup Pro\TuneupPro.exe
    Task: C:\Windows\Tasks\WSE_Astromenda.job => C:\Users\DAVELE~1\AppData\Roaming\WSE_AS~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

    ==================== Loaded Modules (whitelisted) =============

    2014-07-18 07:22 - 2014-07-18 07:22 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
    2014-08-29 16:02 - 2014-08-29 16:02 - 02804736 _____ () C:\Program Files\AVAST Software\Avast\defs\14082900\algo.dll
    2014-08-30 09:31 - 2014-08-30 09:31 - 02804736 _____ () C:\Program Files\AVAST Software\Avast\defs\14082901\algo.dll
    2014-04-06 23:00 - 2014-04-06 23:00 - 00039568 _____ () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
    2014-04-07 03:06 - 2014-04-07 03:06 - 00023552 _____ () C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
    2014-07-18 07:22 - 2014-07-18 07:22 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
    2014-04-05 18:40 - 2012-10-19 03:20 - 00442696 _____ () C:\Program Files\Hostless Modem\SMART BRO\CheckNDISPort_df.exe
    2012-12-24 21:51 - 2012-12-24 21:51 - 00093168 _____ () D:\Wi-Free\launcher.exe
    2014-08-24 14:54 - 2012-11-09 05:02 - 01752576 _____ () D:\File Shredder\fsshell.dll
    2014-08-27 22:05 - 2014-08-27 22:05 - 00012288 _____ () C:\Program Files\MyPC Backup\GetText.dll
    2013-11-01 17:01 - 2013-11-01 17:01 - 00911872 _____ () C:\Windows\assembly\GAC_32\System.Data.SQLite\1.0.66.0__db937bc2d44ff139\System.Data.SQLite.dll
    2014-08-28 14:02 - 2014-08-28 14:02 - 03800688 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

    ==================== Alternate Data Streams (whitelisted) =========

    (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


    ==================== Safe Mode (whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


    ==================== EXE Association (whitelisted) =============

    (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


    ==================== MSCONFIG/TASK MANAGER disabled items =========

    (Currently there is no automatic fix for this section.)

    MSCONFIG\startupreg: Dashlane => "C:\Users\daveleonard\AppData\Roaming\Dashlane\Dashlane.exe" autoLaunchAtStartup

    ==================== Faulty Device Manager Devices =============

    Name: Lexmark X422
    Description: Lexmark X422
    Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
    Manufacturer: Lexmark
    Service: usbscan
    Problem: : This device cannot start. (Code10)
    Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
    On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (08/30/2014 09:33:17 AM) (Source: VSS) (EventID: 8194) (User: )
    Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
    .
    This is often caused by incorrect security settings in either the writer or requestor process.


    Operation:
    Gathering Writer Data

    Context:
    Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
    Writer Name: System Writer
    Writer Instance ID: {39ed7cb4-d239-4530-bfec-eb6d67745a26}

    Error: (08/30/2014 08:58:31 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: plugin-container.exe, version: 31.0.0.5310, time stamp: 0x53c75e91
    Faulting module name: mozalloc.dll, version: 31.0.0.5310, time stamp: 0x53c72e91
    Exception code: 0x80000003
    Fault offset: 0x0000141b
    Faulting process id: 0x13e0
    Faulting application start time: 0xplugin-container.exe0
    Faulting application path: plugin-container.exe1
    Faulting module path: plugin-container.exe2
    Report Id: plugin-container.exe3

    Error: (08/29/2014 08:02:10 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: SpotfluxLiteService.exe, version: 1.0.0.0, time stamp: 0x52f30741
    Faulting module name: KERNELBASE.dll, version: 6.1.7601.18409, time stamp: 0x531599f6
    Exception code: 0xe0434352
    Fault offset: 0x0000812f
    Faulting process id: 0x8fc
    Faulting application start time: 0xSpotfluxLiteService.exe0
    Faulting application path: SpotfluxLiteService.exe1
    Faulting module path: SpotfluxLiteService.exe2
    Report Id: SpotfluxLiteService.exe3

    Error: (08/29/2014 08:02:10 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
    Description: Application: SpotfluxLiteService.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.IO.FileLoadException
    Stack:
    at LocalPolicy.COM.IGroupPolicyObject.OpenLocalMachineGPO(UInt32)
    at LocalPolicy.ComputerGroupPolicyObject+<>c__DisplayClass2.<.ctor>b__0()
    at LocalPolicy.GroupPolicyObject.trycatch(System.Func`1<UInt32>, System.String, System.Object[])
    at LocalPolicy.ComputerGroupPolicyObject..ctor(LocalPolicy.GroupPolicyObjectSettings)
    at SpotfluxLiteWCF.Proxies.FirefoxThreadMethod()
    at System.Threading.ThreadHelper.ThreadStart_Context(System.Object)
    at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
    at System.Threading.ThreadHelper.ThreadStart()

    Error: (08/29/2014 07:59:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

    Error: (08/29/2014 07:59:27 PM) (Source: Winlogon) (EventID: 4103) (User: )
    Description: Windows license activation failed. Error 0x80070005.

    Error: (08/29/2014 06:52:30 PM) (Source: SideBySide) (EventID: 33) (User: )
    Description: Activation context generation failed for "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
    Dependent Assembly rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0" could not be found.
    Please use sxstrace.exe for detailed diagnosis.

    Error: (08/29/2014 06:19:15 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: SpotfluxLiteService.exe, version: 1.0.0.0, time stamp: 0x52f30741
    Faulting module name: KERNELBASE.dll, version: 6.1.7601.18409, time stamp: 0x531599f6
    Exception code: 0xe0434352
    Fault offset: 0x0000812f
    Faulting process id: 0x41c
    Faulting application start time: 0xSpotfluxLiteService.exe0
    Faulting application path: SpotfluxLiteService.exe1
    Faulting module path: SpotfluxLiteService.exe2
    Report Id: SpotfluxLiteService.exe3

    Error: (08/29/2014 06:19:15 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
    Description: Application: SpotfluxLiteService.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.IO.FileLoadException
    Stack:
    at LocalPolicy.COM.IGroupPolicyObject.OpenLocalMachineGPO(UInt32)
    at LocalPolicy.ComputerGroupPolicyObject+<>c__DisplayClass2.<.ctor>b__0()
    at LocalPolicy.GroupPolicyObject.trycatch(System.Func`1<UInt32>, System.String, System.Object[])
    at LocalPolicy.ComputerGroupPolicyObject..ctor(LocalPolicy.GroupPolicyObjectSettings)
    at SpotfluxLiteWCF.Proxies.ChromeThreadMethod()
    at System.Threading.ThreadHelper.ThreadStart_Context(System.Object)
    at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
    at System.Threading.ThreadHelper.ThreadStart()

    Error: (08/29/2014 06:17:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
    Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


    System errors:
    =============
    Error: (08/29/2014 08:02:46 PM) (Source: DCOM) (EventID: 10001) (User: )
    Description: C:\Windows\System32\slui.exe -Embedding5{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}

    Error: (08/29/2014 08:02:24 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The Your Service service terminated unexpectedly. It has done this 1 time(s).

    Error: (08/29/2014 07:59:42 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The CyberGhost 5 Client Service service failed to start due to the following error:
    %%2

    Error: (08/29/2014 07:59:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The stunnel service failed to start due to the following error:
    %%2

    Error: (08/29/2014 07:59:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The Microsoft Antimalware Service service failed to start due to the following error:
    %%1053

    Error: (08/29/2014 07:59:01 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: A timeout was reached (30000 milliseconds) while waiting for the Microsoft Antimalware Service service to connect.

    Error: (08/29/2014 06:19:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The Your Service service terminated unexpectedly. It has done this 1 time(s).

    Error: (08/29/2014 06:17:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The CyberGhost 5 Client Service service failed to start due to the following error:
    %%2

    Error: (08/29/2014 06:16:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The stunnel service failed to start due to the following error:
    %%2

    Error: (08/29/2014 06:16:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The Microsoft Antimalware Service service failed to start due to the following error:
    %%1053


    Microsoft Office Sessions:
    =========================
    Error: (11/18/2013 07:19:43 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
    Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 170029 seconds with 0 seconds of active time. This session ended with a crash.

    Error: (11/07/2013 03:25:00 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
    Description: ID: 13, Application Name: Microsoft Office OneNote, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 6 seconds with 0 seconds of active time. This session ended with a crash.


    ==================== Memory info ===========================

    Processor: Pentium(R) Dual-Core CPU T4400 @ 2.20GHz
    Percentage of memory in use: 53%
    Total physical RAM: 1977.98 MB
    Available physical RAM: 928.11 MB
    Total Pagefile: 3955.95 MB
    Available Pagefile: 2630.27 MB
    Total Virtual: 2047.88 MB
    Available Virtual: 1884.05 MB

    ==================== Drives ================================

    Drive c: () (Fixed) (Total:99.97 GB) (Free:68.1 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
    Drive d: () (Fixed) (Total:132.81 GB) (Free:130.43 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: CE6DCE6D)
    Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=132.8 GB) - (Type=07 NTFS)

    ==================== End Of Log ============================
     

    Attached Files:

    Last edited by a moderator: Aug 31, 2014
    daveleonard, Aug 30, 2014
    #3
  5. starbuck

    starbuck Rest In Peace Pete Administrator

    Joined:
    Sep 26, 2009
    Messages:
    3,830
    Location:
    Midlands, UK
    Operating System:
    Windows 10
    CPU:
    AMD Athlon II x2 250 Processor 3.00GHz
    Memory:
    8gb DDR3
    Hard Drive:
    500gb SATA
    Graphics Card:
    ASUS GeForce GTX 960 2gb
    Power Supply:
    650w PowerCool X-Viper
    Hi Dave,

    Please download the attached fixlist.txt file (bottom of this post) and save it to D:\.
    NOTE.
    It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

    NOTICE: This script was written specifically for this user, for use on that particular machine.
    Running this on another machine may cause damage to your operating system

    Re-run FRST/FRST64 (which ever is installed ) and press the Fix button just once and wait.

    2cf1672fdd2151dad6f349c704143429.png

    The tool will make a log in D:\ (Fixlog.txt). Please post this in your next reply.

    Thanks
     

    Attached Files:

    starbuck, Aug 31, 2014
    #4

Share This Page