Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-06-2016 01 Ran by [removed] (administrator) on BARRY-PC (23-06-2016 13:37:31) Running from C:\Users\[removed]\Downloads [removed] Platform: Windows 10 Home Version 1511 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Edge) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe (Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.7.0.76\n360.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe (Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.7.0.76\n360.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (MiTAC Digital Corporation.) C:\Program Files (x86)\Content Manager\CmTray.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Dropbox, Inc.) C:\Users\barry\AppData\Roaming\Dropbox\bin\Dropbox.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (RealNetworks, Inc.) C:\Program Files (x86)\real\realplayer\Update\realsched.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXRCV.exe (SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.526.11220.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Microsoft Corporation) C:\Windows\System32\Taskmgr.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Digital Care Solutions) C:\Program Files\BDServices\BitDefenderCOM.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7981088 2009-07-20] (Realtek Semiconductor) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-09-15] (Apple Inc.) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\real\realplayer\update\realsched.exe [295072 2013-02-06] (RealNetworks, Inc.) HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation) HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [650784 2015-12-22] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863776 2015-12-22] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1065968 2015-07-23] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60688 2015-09-15] (Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.) HKLM\...\Policies\Explorer: [NoSetActiveDesktop] 0 HKU\S-1-5-21-578200233-972976924-3727881056-1001\...\Run: [Dropbox Update] => C:\Users\barry\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-22] (Dropbox, Inc.) HKU\S-1-5-21-578200233-972976924-3727881056-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIMAE.EXE [298560 2013-12-16] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-578200233-972976924-3727881056-1001\...\Run: [BitTorrent] => C:\Users\barry\AppData\Roaming\BitTorrent\BitTorrent.exe [1698152 2015-08-19] (BitTorrent Inc.) HKU\S-1-5-21-578200233-972976924-3727881056-1001\...\Run: [Magellan CmTray] => C:\Program Files (x86)\Content Manager\CmTray.exe [439296 2010-08-24] (MiTAC Digital Corporation.) HKU\S-1-5-21-578200233-972976924-3727881056-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd) HKU\S-1-5-21-578200233-972976924-3727881056-1001\...\Run: [Norton Download Manager{N360PREMEXE-SHPD-FSD5183}] => C:\Users\Public\Downloads\Norton\{N360PREMEXE-SHPD-FSD5183}\FSDUI_N360P.exe [1099176 2016-06-21] (Symantec Corporation) HKU\S-1-5-21-578200233-972976924-3727881056-1001\...\Run: [Bomgar_Cleanup_ZD105951531250] => cmd.exe /C rd /S /Q "C:\ProgramData\bomgar-scc-0x576bfeaf" & reg.exe delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Bomgar_Cleanup_ZD105951531250 /f HKU\S-1-5-21-578200233-972976924-3727881056-1001\...\Policies\Explorer: [NoSetActiveDesktop] 0 HKU\S-1-5-21-578200233-972976924-3727881056-1001\...A8F59079A8D5}\localserver32: <==== ATTENTION ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-05-17] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-05-17] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-05-17] (Google) ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton 360\Engine64\22.7.0.76\buShell.dll [2016-06-09] (Symantec Corporation) ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton 360\Engine64\22.7.0.76\buShell.dll [2016-06-09] (Symantec Corporation) ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton 360\Engine64\22.7.0.76\buShell.dll [2016-06-09] (Symantec Corporation) ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\barry\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\FileSyncShell64.dll [2016-05-23] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\barry\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\FileSyncShell64.dll [2016-05-23] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\barry\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\FileSyncShell64.dll [2016-05-23] (Microsoft Corporation) ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => No File ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => No File ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => No File ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => No File ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\barry\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll [2016-05-23] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\barry\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll [2016-05-23] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\barry\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll [2016-05-23] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\barry\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-06-12] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-06-13] ShortcutTarget: Dropbox.lnk -> C:\Users\barry\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) GroupPolicy: Restriction - Chrome <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION CHR HKU\S-1-5-21-578200233-972976924-3727881056-1001\SOFTWARE\Policies\Google: Restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{2209d0d7-5769-4b9c-b372-d791d5f51913}: [DhcpNameServer] 172.20.10.1 Tcpip\..\Interfaces\{ea8713c9-52cc-42dd-a388-b7b0ccc5398b}: [DhcpNameServer] 192.168.1.254 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=en&pid=N360&pvid=21.5.0.19 HKU\S-1-5-21-578200233-972976924-3727881056-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://yahoo.com/ SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACGW SearchScopes: HKU\S-1-5-21-578200233-972976924-3727881056-1001 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxps://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN11913&l=dis&prt=NSBU&chn=1000&geo=US&ver=22&locale=en_US&gct=kwd&qsrc=2869 BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine64\22.7.0.76\coIEPlg.dll [2016-05-31] (Symantec Corporation) BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2012-11-29] (RealDownloader) BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine\22.7.0.76\coIEPlg.dll [2016-05-31] (Symantec Corporation) BHO-x32: No Name -> {6ffed9d8-942f-4384-aa29-d3bd083a346a} -> No File BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2009-10-26] (Sun Microsystems, Inc.) BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-11-29] (Skype Technologies S.A.) BHO-x32: Wincore Mediabar -> {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} -> C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\ToolBar\WINCOR~2.DLL => No File BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2009-10-26] (Sun Microsystems, Inc.) BHO-x32: No Name -> {EF3CB363-38C4-4DA3-B398-DE6184A7819B} -> No File BHO-x32: No Name -> {fc1e426b-fa76-428f-b680-86ef1edb13c1} -> No File BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\22.7.0.76\coIEPlg.dll [2016-05-31] (Symantec Corporation) Toolbar: HKLM-x32 - No Name - {54ba686e-738f-42fe-badd-d8cb7cfbc07e} - No File Toolbar: HKLM-x32 - Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\ToolBar\WINCOR~2.DLL No File Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\22.7.0.76\coIEPlg.dll [2016-05-31] (Symantec Corporation) Toolbar: HKU\S-1-5-21-578200233-972976924-3727881056-1001 -> No Name - {D5F7C10D-2F86-4E99-90DA-25F8B0400992} - No File Toolbar: HKU\S-1-5-21-578200233-972976924-3727881056-1001 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\22.7.0.76\coIEPlg.dll [2016-05-31] (Symantec Corporation) DPF: HKLM-x32 {05D96F71-87C6-11D3-9BE4-00902742D6E0} hxxps://quickr.notes.assurant.com/qp2.cab DPF: HKLM-x32 {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files (x86)\Yahoo!\Common\Yinsthelper.dll DPF: HKLM-x32 {4F29DE54-5EB7-4D76-B610-A86B5CD2A234} DPF: HKLM-x32 {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab DPF: HKLM-x32 {924B4927-D3BA-41EA-9F7E-8A89194AB3AC} hxxp://panda-plugin.disney.go.com/plugin/win32/p3dactivex.cab Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-11-29] (Skype Technologies S.A.) FireFox: ======== FF ProfilePath: C:\Users\barry\AppData\Roaming\Mozilla\Firefox\Profiles\ljdbplub.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll [2013-10-02] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll [2013-10-02] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] () FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\ZoomBrowser EX\Program\NPCIG.dll [2008-10-15] (CANON INC.) FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll [2009-10-26] (Sun Microsystems, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @Motive.com/NpMotive,version=1.0 -> C:\Program Files (x86)\Common Files\Motive\npMotive.dll [2012-11-15] (Alcatel-Lucent) FF Plugin-x32: @Motive.com/npMotiveRequest,version=1.0 -> C:\Program Files (x86)\Common Files\Motive\npMotiveRequest.dll [2011-12-06] (Alcatel-Lucent) FF Plugin-x32: @real.com/nppl3260;version=16.0.0.282 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2013-02-06] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.0 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [2012-11-29] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.0 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2012-11-29] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.0 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [2012-11-29] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-10-03] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-10-03] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=16.0.0.282 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2013-02-06] (RealPlayer) FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2012-11-29] (RealDownloader) FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll [2009-08-12] () FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-07] () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-578200233-972976924-3727881056-1001: @citrixonline.com/appdetectorplugin -> C:\Users\barry\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-09-29] (Citrix Online) FF Plugin HKU\S-1-5-21-578200233-972976924-3727881056-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\barry\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2010-11-29] (Unity Technologies ApS) FF Extension: ArcadeWeb - C:\Users\barry\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[removed] [2011-09-09] [not signed] FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.6.0.142\coFFAddon FF Extension: Norton Identity Safe - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.6.0.142\coFFAddon [2016-06-22] FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.6.0.142\coFFAddon FF HKU\S-1-5-21-578200233-972976924-3727881056-1001\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Unfriend Checker\FF => not found FF HKU\S-1-5-21-578200233-972976924-3727881056-1001\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-06-12] [not signed] Chrome: ======= CHR HomePage: Default -> hxxp://www.google.com/ CHR StartupUrls: Default -> "hxxp://www.google.com/" CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.103\PepperFlash\pepflashplayer.dll () CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.103\ppGoogleNaClPluginChrome.dll => No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.103\pdf.dll => No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll => No File CHR Plugin: (Java Deployment Toolkit 6.0.160.1) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeploytk.dll (Sun Microsystems, Inc.) CHR Plugin: (Java(TM) Platform SE 6 U16) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll => No File CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll => No File CHR Plugin: (NPCIG.dll) - C:\Program Files (x86)\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.) CHR Plugin: (Motive Plugin) - C:\Program Files (x86)\Common Files\Motive\npMotive.dll (Alcatel-Lucent) CHR Plugin: (Motive Management Plug-in) - C:\Program Files (x86)\Common Files\Motive\npMotiveRequest.dll (Alcatel-Lucent) CHR Plugin: (RIM Handheld Application Loader) - C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll () CHR Plugin: (MindSpark Toolbar Platform Plugin Stub) - C:\Program Files (x86)\CouponAlert_2p\bar\1.bin\NP2pStub.dll => No File CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll => No File CHR Plugin: (MindSpark Toolbar Platform Plugin Stub) - C:\Program Files (x86)\Maps4PC_0c\bar\1.bin\NP0cStub.dll => No File CHR Plugin: (Retrogamer Plugin Stub) - C:\Program Files (x86)\Retrogamer_2z\bar\1.bin\NP2zStub.dll => No File CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) CHR Plugin: (Unity Player) - C:\Users\barry\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll => No File CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Download Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer) CHR Profile: C:\Users\barry\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Drive) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21] CHR Extension: (Google Docs Offline) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15] CHR Extension: (Chrome Web Store Payments) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-05] CHR Profile: C:\Users\barry\AppData\Local\Google\Chrome\User Data\Profile 1 CHR Extension: (Google Docs) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-19] CHR Extension: (Google Drive) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-19] CHR Extension: (Store) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\banjjklfojcdbofbhbgiedekefohoaff [2014-10-19] [UpdateUrl: hxxp://autoupdate.chromewebtb.conduit-services.com/sb/?productId=CT3310511&extensionData=\u003Cextension_data\u003E] <==== ATTENTION CHR Extension: (Store) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bcjagnifjocnddgeknajocbkkhlgibem [2014-10-19] [UpdateUrl: hxxp://www.surfcanyon.com/chrome_update.xml] <==== ATTENTION CHR Extension: (YouTube) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-19] CHR Extension: (Google Search) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-19] CHR Extension: (Store) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\edmgmpmklgfbohogafcfobonnkogchec [2014-10-19] CHR Extension: (Store) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-10-19] CHR Extension: (Store) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jplinpmadfkdgipabgcdchbdikologlh [2014-10-19] [UpdateUrl: hxxp://cdn.1click-media.com/Extensions/1clickdownloader/chrome/update.xml] <==== ATTENTION CHR Extension: (Store) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-10-19] CHR Extension: (Store) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2014-10-19] CHR Extension: (Google Wallet) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-19] CHR Extension: (Gmail) - C:\Users\barry\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-19] CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.7.0.76\Exts\Chrome.crx [2016-06-22] CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-578200233-972976924-3727881056-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [iaenoodoabpfbmpcidlgdmjnghapjchg] - C:\Users\barry\AppData\Local\CRE\iaenoodoabpfbmpcidlgdmjnghapjchg.crx CHR HKU\S-1-5-21-578200233-972976924-3727881056-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mhfdcmehmjcclgopdodkjdicohagipid] - C:\Users\barry\AppData\Local\CRE\mhfdcmehmjcclgopdodkjdicohagipid.crx CHR HKU\S-1-5-21-578200233-972976924-3727881056-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pnjnnnhampgflieglcelomcofocioegp] - C:\Users\barry\AppData\Local\CRE\pnjnnnhampgflieglcelomcofocioegp.crx CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.7.0.76\Exts\Chrome.crx [2016-06-22] CHR HKLM-x32\...\Chrome\Extension: [deknpepbldplggimopkbdneonkngmlfe] - CHR HKLM-x32\...\Chrome\Extension: [iaenoodoabpfbmpcidlgdmjnghapjchg] - CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2012-11-29] CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-11-29] CHR HKLM-x32\...\Chrome\Extension: [mhdohahbadnmbgemekfgpcohicmddegf] - CHR HKLM-x32\...\Chrome\Extension: [mhfdcmehmjcclgopdodkjdicohagipid] - CHR HKLM-x32\...\Chrome\Extension: [pnjnnnhampgflieglcelomcofocioegp] - ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-09-02] (Apple Inc.) S4 ATT MAHostService; C:\Program Files (x86)\ATT\8.2.1.6\ma\bin\MAHostService.exe [319488 2012-11-15] (Alcatel-Lucent) [File not signed] R2 BitDefenderCOM; C:\Program Files\BDServices\BitDefenderCom.exe [1017344 2016-03-15] (Digital Care Solutions) [File not signed] R2 EpsonCustomerResearchParticipation; C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe [676336 2015-06-25] (SEIKO EPSON CORPORATION) R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation) R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed] R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed] R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-08] (Hewlett-Packard Co.) [File not signed] S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed] R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed] R2 N360; C:\Program Files (x86)\Norton 360\Engine\22.7.0.76\N360.exe [289080 2016-06-17] (Symantec Corporation) S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed] S4 pcCMService; C:\Program Files (x86)\Common Files\Motive\pcCMService.exe [369152 2012-10-05] (Alcatel-Lucent) [File not signed] S4 pcCMService64; C:\Program Files\Common Files\Motive\pcCMService.exe [460288 2012-10-05] (Alcatel-Lucent) [File not signed] S4 pcServiceHost; C:\Program Files (x86)\Common Files\Motive\pcServiceHost.exe [342528 2012-11-15] (Alcatel-Lucent) [File not signed] S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed] S4 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] () R3 scan; C:\Program Files\BDServices\scan.dll [602456 2016-02-22] (Bitdefender) S4 sprtsvc_ddoctorv2; C:\Program Files (x86)\Comcast\Desktop Doctor\bin\sprtsvc.exe [202560 2008-04-24] (SupportSoft, Inc.) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH) S4 WDDMService; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [288768 2011-03-09] (WDC) [File not signed] S4 WDFME; C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe [1066896 2011-03-09] () S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S4 WDSC; C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSC.exe [491920 2011-03-09] () S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\22.6.0.142\Definitions\BASHDefs\20160613.001\BHDrvx64.sys [1832176 2016-06-13] (Symantec Corporation) R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1607000.04C\ccSetx64.sys [174328 2016-06-01] (Symantec Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [497392 2016-04-27] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [156912 2016-04-27] (Symantec Corporation) R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\22.6.0.142\Definitions\IPSDefs\20160622.001\IDSvia64.sys [876248 2016-06-21] (Symantec Corporation) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 MREMP50; C:\Program Files (x86)\Common Files\Motive\MREMP50.sys [21248 2012-11-15] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed] S3 MREMP50a64; C:\Program Files\Common Files\Motive\MREMP50a64.sys [43008 2012-11-15] (Printing Communications Assoc., Inc. (PCAUSA)) S3 MRESP50; C:\Program Files (x86)\Common Files\Motive\MRESP50.sys [20096 2012-11-15] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed] S3 MRESP50a64; C:\Program Files\Common Files\Motive\MRESP50a64.sys [40960 2012-11-15] (Printing Communications Assoc., Inc. (PCAUSA)) R3 RimVSerPort; C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys [31744 2009-01-09] (Research in Motion Ltd) R1 SbFw; C:\Windows\System32\drivers\SbFw.sys [253528 2011-04-05] (Sunbelt Software, Inc.) S3 sbhips; C:\Windows\System32\drivers\sbhips.sys [60504 2011-04-05] (Sunbelt Software, Inc.) R1 SbTis; C:\Windows\System32\drivers\sbtis.sys [94296 2011-04-05] (Sunbelt Software, Inc.) R1 SRTSP; C:\Windows\System32\Drivers\N360x64\1607000.04C\SRTSP64.SYS [773360 2016-06-01] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1607000.04C\SRTSPX64.SYS [48888 2016-06-01] (Symantec Corporation) R0 SymEFASI; C:\Windows\System32\drivers\N360x64\1607000.04C\SYMEFASI64.SYS [1627352 2016-06-01] (Symantec Corporation) S0 SymELAM; C:\Windows\System32\drivers\N360x64\1607000.04C\SymELAM.sys [24192 2016-02-23] (Symantec Corporation) R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [101112 2016-06-22] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\N360x64\1607000.04C\Ironx64.SYS [291056 2016-06-01] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1607000.04C\SYMNETS.SYS [567536 2016-06-01] (Symantec Corporation) R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [452040 2016-02-22] (BitDefender S.R.L.) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) U3 idsvc; no ImagePath S3 NAVENG; \??\C:\Program Files (x86)\Norton 360\NortonData\22.6.0.142\Definitions\SDSDefs\20160622.002\ENG64.SYS [X] S3 NAVEX15; \??\C:\Program Files (x86)\Norton 360\NortonData\22.6.0.142\Definitions\SDSDefs\20160622.002\EX64.SYS [X] U5 REALPLAYERUPDATESVC; no ImagePath U3 wpcsvc; no ImagePath ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-06-23 13:37 - 2016-06-23 13:38 - 00042302 _____ C:\Users\barry\Downloads\FRST.txt 2016-06-23 13:37 - 2016-06-23 13:37 - 00000000 ____D C:\FRST 2016-06-23 13:36 - 2016-06-23 13:37 - 02387456 _____ (Farbar) C:\Users\barry\Downloads\FRST64.exe 2016-06-23 12:55 - 2016-06-23 12:55 - 00003306 _____ C:\WINDOWS\System32\Tasks\MyTurboPC.com Registration3 2016-06-23 12:55 - 2016-06-23 12:55 - 00000494 _____ C:\WINDOWS\Tasks\MyTurboPC.com Registration3.job 2016-06-23 12:54 - 2016-06-23 12:54 - 00004118 _____ C:\WINDOWS\System32\Tasks\MyTurboPC_sch_2E998A8F-3963-11E6-9742-0025115B4A92 2016-06-23 12:54 - 2016-06-23 12:54 - 00003404 _____ C:\WINDOWS\System32\Tasks\MyTurboPC.com Update3 2016-06-23 12:54 - 2016-06-23 12:54 - 00003096 _____ C:\WINDOWS\System32\Tasks\MyTurboPC.com Update3_triggeronce 2016-06-23 12:54 - 2016-06-23 12:54 - 00002744 _____ C:\WINDOWS\System32\Tasks\MyTurboPC Startup 2016-06-23 12:54 - 2016-06-23 12:54 - 00001240 _____ C:\Users\barry\Desktop\MyTurboPC.lnk 2016-06-23 12:54 - 2016-06-23 12:54 - 00000569 _____ C:\WINDOWS\Tasks\MyTurboPC_sch_2E998A8F-3963-11E6-9742-0025115B4A92.job 2016-06-23 12:54 - 2016-06-23 12:54 - 00000458 _____ C:\WINDOWS\Tasks\MyTurboPC.com Update3_triggeronce.job 2016-06-23 12:54 - 2016-06-23 12:54 - 00000458 _____ C:\WINDOWS\Tasks\MyTurboPC.com Update3.job 2016-06-23 12:54 - 2016-06-23 12:54 - 00000450 _____ C:\WINDOWS\Tasks\MyTurboPC Startup.job 2016-06-23 12:54 - 2016-06-23 12:54 - 00000000 ____D C:\Users\barry\AppData\Roaming\MyTurboPC.com 2016-06-23 12:54 - 2016-06-23 12:54 - 00000000 ____D C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyTurboPC.com 2016-06-23 12:54 - 2016-06-23 12:54 - 00000000 ____D C:\ProgramData\MyTurboPC.com 2016-06-23 12:54 - 2016-06-23 12:54 - 00000000 ____D C:\Program Files\BDServices 2016-06-23 12:54 - 2016-06-23 12:54 - 00000000 ____D C:\Program Files (x86)\MyTurboPC.com 2016-06-23 12:53 - 2016-06-23 12:53 - 10277888 _____ (MyTurboPC.com) C:\Users\barry\Downloads\Myturbopc_63278095-E11E-4E32-A56B-DF357830E992_.exe 2016-06-23 11:24 - 2015-06-03 07:45 - 00016800 _____ C:\ProgramData\Z@!-2c424899-5927-441c-abb4-5c744c517e6f.tmp 2016-06-23 11:23 - 2015-06-03 07:45 - 00016800 _____ C:\Users\barry\AppData\Local\Z@!-b5177b70-c87f-40ac-ae0c-18ba8cdbb62d.tmp 2016-06-23 11:23 - 2015-06-03 07:45 - 00015776 _____ C:\Users\barry\AppData\Local\Z@S!-a5bb627c-2e02-4e9b-a00d-312df5958e4f.tmp 2016-06-23 11:22 - 2016-06-23 11:26 - 00000000 ____D C:\ProgramData\bomgar-scc-0x576bfeaf 2016-06-23 11:22 - 2016-06-23 11:22 - 02521704 _____ (bomgar) C:\Users\barry\Downloads\bomgar-scc-w0iyc30jd8weehe776dx7dygehd6jd5hyg68gxec40jc90.exe 2016-06-23 10:59 - 2016-06-23 11:12 - 00000000 ____D C:\Program Files (x86)\LogMeIn Rescue RC - 93ade561-20ca-4e29-b068-d2b33c55802d 2016-06-23 10:59 - 2016-06-23 10:59 - 00002271 _____ C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec Support (8).lnk 2016-06-23 10:56 - 2016-06-23 10:56 - 00002310 _____ C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec Support (7).lnk 2016-06-23 10:47 - 2016-06-23 10:47 - 00002310 _____ C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec Support (6).lnk 2016-06-23 10:34 - 2016-06-23 10:34 - 01596968 _____ (LogMeIn, Inc.) C:\Users\barry\Downloads\Support-LogMeInRescue (2).exe 2016-06-23 10:34 - 2016-06-23 10:34 - 00002336 _____ C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec Support (5).lnk 2016-06-23 10:05 - 2016-06-23 10:05 - 00002310 _____ C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec Support (4).lnk 2016-06-23 08:08 - 2016-06-23 08:08 - 00002310 _____ C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec Support (3).lnk 2016-06-23 07:44 - 2016-06-23 07:44 - 00002310 _____ C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec Support (2).lnk 2016-06-23 07:33 - 2016-06-23 07:35 - 01596968 _____ (LogMeIn, Inc.) C:\Users\barry\Downloads\Support-LogMeInRescue (1).exe 2016-06-23 07:33 - 2016-06-23 07:33 - 01596968 _____ (LogMeIn, Inc.) C:\Users\barry\Downloads\Support-LogMeInRescue.exe 2016-06-23 07:33 - 2016-06-23 07:33 - 00002336 _____ C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec Support.lnk 2016-06-22 23:38 - 2016-06-22 23:38 - 00000452 _____ C:\WINDOWS\ntbtlog.txt 2016-06-22 23:12 - 2016-06-23 13:17 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton 360 2016-06-22 23:07 - 2016-06-22 23:07 - 00003376 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration 2016-06-22 23:06 - 2016-06-22 23:06 - 00002321 _____ C:\Users\Public\Desktop\Norton 360.lnk 2016-06-22 16:30 - 2015-08-18 07:52 - 00016376 _____ (TeamViewer GmbH) C:\WINDOWS\system32\Drivers\TVMonitor.sys 2016-06-22 16:18 - 2016-06-22 16:18 - 03121048 _____ (TeamViewer) C:\Users\barry\Downloads\soft3.exe 2016-06-21 22:02 - 2016-06-21 22:02 - 00001185 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2016-06-21 22:02 - 2016-06-21 22:02 - 00000000 ____D C:\Users\barry\AppData\Roaming\Malwarebytes 2016-06-21 22:02 - 2016-06-21 22:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware 2016-06-21 22:02 - 2016-06-21 22:02 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-06-21 22:02 - 2016-06-21 22:02 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2016-06-21 22:02 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2016-06-21 21:11 - 2016-06-22 23:30 - 00000000 ____D C:\WINDOWS\System32\Tasks\Remediation 2016-06-21 21:05 - 2016-06-22 18:02 - 00101112 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS 2016-06-21 21:05 - 2016-06-22 18:02 - 00008270 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT 2016-06-21 21:02 - 2016-06-22 23:27 - 00000000 ____D C:\Program Files (x86)\NortonInstaller 2016-06-21 21:02 - 2016-06-22 23:06 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360 2016-06-21 21:02 - 2016-06-21 21:02 - 00000000 ____D C:\Program Files (x86)\Norton 360 2016-06-21 20:58 - 2016-06-23 08:08 - 00001529 _____ C:\Users\barry\Desktop\Norton Download Manager.lnk 2016-06-21 20:51 - 2016-06-21 20:51 - 00002838 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2016-06-21 20:51 - 2016-06-21 20:51 - 00000870 _____ C:\Users\Public\Desktop\CCleaner.lnk 2016-06-21 20:51 - 2016-06-21 20:51 - 00000000 ____D C:\Users\barry\AppData\Roaming\WinRAR 2016-06-21 20:51 - 2016-06-21 20:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2016-06-21 20:51 - 2016-06-21 20:51 - 00000000 ____D C:\Program Files\CCleaner 2016-06-21 20:43 - 2016-06-21 20:43 - 00000000 ____D C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2016-06-21 20:43 - 2016-06-21 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2016-06-21 20:41 - 2016-06-21 20:43 - 00000000 ____D C:\Program Files\WinRAR 2016-06-21 20:21 - 2016-06-21 20:21 - 00002297 _____ C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC Support Office (5).lnk 2016-06-21 20:11 - 2016-06-21 20:11 - 03703360 _____ C:\Users\barry\Downloads\adwcleaner_5.200 (1).exe 2016-06-21 20:10 - 2016-06-21 20:14 - 00000000 ____D C:\AdwCleaner 2016-06-21 20:09 - 2016-06-21 20:10 - 03703360 _____ C:\Users\barry\Downloads\adwcleaner_5.200.exe 2016-06-21 20:04 - 2016-06-21 20:04 - 00002297 _____ C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC Support Office (4).lnk 2016-06-21 19:57 - 2016-06-21 19:58 - 00894960 _____ C:\Users\barry\Downloads\Norton_Removal_Tool.exe 2016-06-21 19:24 - 2016-06-21 19:24 - 00002297 _____ C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC Support Office (3).lnk 2016-06-21 18:55 - 2016-06-21 18:55 - 00000000 ____D C:\Users\barry\AppData\Local\VS Revo Group 2016-06-21 18:55 - 2016-06-21 18:55 - 00000000 ____D C:\ProgramData\VS Revo Group 2016-06-21 18:54 - 2016-06-21 18:55 - 11374528 _____ (VS Revo Group ) C:\Users\barry\Downloads\RevoUninProSetup.exe 2016-06-21 18:52 - 2011-09-20 07:40 - 00161744 _____ C:\Program Files (x86)\0cres.dll 2016-06-21 18:24 - 2016-06-23 10:59 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2016-06-21 18:24 - 2016-06-21 18:24 - 00002297 _____ C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC Support Office (2).lnk 2016-06-21 18:05 - 2016-06-21 18:06 - 26314552 _____ (SUPERAntiSpyware) C:\Users\barry\Downloads\SUPERAntiSpyware.exe 2016-06-21 17:52 - 2016-06-21 17:52 - 00000594 _____ C:\Users\barry\Desktop\pc support norton.txt 2016-06-21 17:26 - 2016-06-21 17:26 - 00000248 _____ C:\rescue.info 2016-06-21 17:25 - 2016-06-21 17:25 - 00002336 _____ C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC Support Office.lnk 2016-06-20 21:18 - 2016-06-20 21:18 - 08929073 _____ C:\Users\barry\Documents\WWM_IDOBBQ_INVITE.pdf 2016-06-15 15:21 - 2016-05-28 00:57 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2016-06-15 15:21 - 2016-05-28 00:57 - 01372312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2016-06-15 15:21 - 2016-05-28 00:35 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe 2016-06-15 15:21 - 2016-05-28 00:35 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2016-06-15 15:21 - 2016-05-28 00:31 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2016-06-15 15:21 - 2016-05-28 00:29 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-06-15 15:21 - 2016-05-28 00:29 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2016-06-15 15:21 - 2016-05-28 00:27 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll 2016-06-15 15:21 - 2016-05-28 00:27 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2016-06-15 15:21 - 2016-05-28 00:26 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2016-06-15 15:21 - 2016-05-28 00:26 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2016-06-15 15:21 - 2016-05-28 00:24 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2016-06-15 15:21 - 2016-05-28 00:22 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2016-06-15 15:21 - 2016-05-28 00:22 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2016-06-15 15:21 - 2016-05-28 00:22 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2016-06-15 15:21 - 2016-05-28 00:19 - 24605696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-06-15 15:21 - 2016-05-28 00:18 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2016-06-15 15:21 - 2016-05-28 00:18 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2016-06-15 15:21 - 2016-05-28 00:17 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2016-06-15 15:21 - 2016-05-28 00:15 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2016-06-15 15:21 - 2016-05-28 00:15 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2016-06-15 15:21 - 2016-05-28 00:15 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2016-06-15 15:21 - 2016-05-28 00:14 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2016-06-15 15:21 - 2016-05-28 00:14 - 00606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-06-15 15:21 - 2016-05-28 00:14 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2016-06-15 15:21 - 2016-05-28 00:13 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2016-06-15 15:21 - 2016-05-28 00:12 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2016-06-15 15:21 - 2016-05-28 00:11 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2016-06-15 15:21 - 2016-05-28 00:11 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2016-06-15 15:21 - 2016-05-28 00:11 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2016-06-15 15:21 - 2016-05-28 00:08 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2016-06-15 15:21 - 2016-05-28 00:06 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2016-06-15 15:21 - 2016-05-28 00:03 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2016-06-15 15:21 - 2016-05-28 00:03 - 02609664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2016-06-15 15:21 - 2016-05-28 00:00 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2016-06-15 15:21 - 2016-05-27 23:58 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2016-06-15 15:20 - 2016-05-28 02:13 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-06-15 15:20 - 2016-05-28 02:13 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-06-15 15:20 - 2016-05-28 02:13 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-06-15 15:20 - 2016-05-28 02:13 - 00290496 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-06-15 15:20 - 2016-05-28 02:13 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-06-15 15:20 - 2016-05-28 02:13 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2016-06-15 15:20 - 2016-05-28 01:25 - 04268880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll 2016-06-15 15:20 - 2016-05-28 01:23 - 00388384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll 2016-06-15 15:20 - 2016-05-28 01:23 - 00312160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll 2016-06-15 15:20 - 2016-05-28 01:22 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-06-15 15:20 - 2016-05-28 01:22 - 04387680 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll 2016-06-15 15:20 - 2016-05-28 01:22 - 00428896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2016-06-15 15:20 - 2016-05-28 01:22 - 00211296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys 2016-06-15 15:20 - 2016-05-28 01:22 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys 2016-06-15 15:20 - 2016-05-28 01:20 - 00430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll 2016-06-15 15:20 - 2016-05-28 01:18 - 00357216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll 2016-06-15 15:20 - 2016-05-28 01:16 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2016-06-15 15:20 - 2016-05-28 01:09 - 00501600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-06-15 15:20 - 2016-05-28 01:09 - 00170848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe 2016-06-15 15:20 - 2016-05-28 01:09 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2016-06-15 15:20 - 2016-05-28 01:08 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-06-15 15:20 - 2016-05-28 01:08 - 00258912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys 2016-06-15 15:20 - 2016-05-28 01:08 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2016-06-15 15:20 - 2016-05-28 01:07 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-06-15 15:20 - 2016-05-28 01:07 - 02921880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-06-15 15:20 - 2016-05-28 01:07 - 01322248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2016-06-15 15:20 - 2016-05-28 01:07 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2016-06-15 15:20 - 2016-05-28 01:07 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2016-06-15 15:20 - 2016-05-28 01:07 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2016-06-15 15:20 - 2016-05-28 01:07 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2016-06-15 15:20 - 2016-05-28 01:06 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-06-15 15:20 - 2016-05-28 01:06 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2016-06-15 15:20 - 2016-05-28 01:06 - 00730344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll 2016-06-15 15:20 - 2016-05-28 01:06 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2016-06-15 15:20 - 2016-05-28 01:06 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2016-06-15 15:20 - 2016-05-28 01:05 - 04515264 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2016-06-15 15:20 - 2016-05-28 01:04 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-06-15 15:20 - 2016-05-28 01:04 - 00431296 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll 2016-06-15 15:20 - 2016-05-28 01:04 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2016-06-15 15:20 - 2016-05-28 01:04 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2016-06-15 15:20 - 2016-05-28 01:04 - 00111064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll 2016-06-15 15:20 - 2016-05-28 01:04 - 00097096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll 2016-06-15 15:20 - 2016-05-28 01:03 - 00131248 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll 2016-06-15 15:20 - 2016-05-28 00:58 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-06-15 15:20 - 2016-05-28 00:58 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2016-06-15 15:20 - 2016-05-28 00:57 - 02548944 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2016-06-15 15:20 - 2016-05-28 00:57 - 02195632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2016-06-15 15:20 - 2016-05-28 00:57 - 00649792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2016-06-15 15:20 - 2016-05-28 00:57 - 00636304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2016-06-15 15:20 - 2016-05-28 00:57 - 00577376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-06-15 15:20 - 2016-05-28 00:57 - 00546456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2016-06-15 15:20 - 2016-05-28 00:57 - 00521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2016-06-15 15:20 - 2016-05-28 00:57 - 00316256 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2016-06-15 15:20 - 2016-05-28 00:35 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsdport.sys 2016-06-15 15:20 - 2016-05-28 00:31 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe 2016-06-15 15:20 - 2016-05-28 00:31 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2016-06-15 15:20 - 2016-05-28 00:29 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll 2016-06-15 15:20 - 2016-05-28 00:29 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll 2016-06-15 15:20 - 2016-05-28 00:28 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2016-06-15 15:20 - 2016-05-28 00:28 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2016-06-15 15:20 - 2016-05-28 00:28 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FwRemoteSvr.dll 2016-06-15 15:20 - 2016-05-28 00:26 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2016-06-15 15:20 - 2016-05-28 00:26 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe 2016-06-15 15:20 - 2016-05-28 00:26 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2016-06-15 15:20 - 2016-05-28 00:25 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2016-06-15 15:20 - 2016-05-28 00:24 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2016-06-15 15:20 - 2016-05-28 00:24 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ndu.sys 2016-06-15 15:20 - 2016-05-28 00:24 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2016-06-15 15:20 - 2016-05-28 00:24 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2016-06-15 15:20 - 2016-05-28 00:24 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2016-06-15 15:20 - 2016-05-28 00:24 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll 2016-06-15 15:20 - 2016-05-28 00:24 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FwRemoteSvr.dll 2016-06-15 15:20 - 2016-05-28 00:23 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2016-06-15 15:20 - 2016-05-28 00:23 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll 2016-06-15 15:20 - 2016-05-28 00:22 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2016-06-15 15:20 - 2016-05-28 00:22 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2016-06-15 15:20 - 2016-05-28 00:22 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys 2016-06-15 15:20 - 2016-05-28 00:22 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2016-06-15 15:20 - 2016-05-28 00:22 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2016-06-15 15:20 - 2016-05-28 00:22 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll 2016-06-15 15:20 - 2016-05-28 00:21 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2016-06-15 15:20 - 2016-05-28 00:21 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrokerLib.dll 2016-06-15 15:20 - 2016-05-28 00:21 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-06-15 15:20 - 2016-05-28 00:21 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2016-06-15 15:20 - 2016-05-28 00:20 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2016-06-15 15:20 - 2016-05-28 00:20 - 00511488 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll 2016-06-15 15:20 - 2016-05-28 00:20 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\polstore.dll 2016-06-15 15:20 - 2016-05-28 00:20 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2016-06-15 15:20 - 2016-05-28 00:20 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GnssAdapter.dll 2016-06-15 15:20 - 2016-05-28 00:20 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll 2016-06-15 15:20 - 2016-05-28 00:20 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll 2016-06-15 15:20 - 2016-05-28 00:19 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-06-15 15:20 - 2016-05-28 00:19 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2016-06-15 15:20 - 2016-05-28 00:19 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2016-06-15 15:20 - 2016-05-28 00:19 - 00355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll 2016-06-15 15:20 - 2016-05-28 00:19 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll 2016-06-15 15:20 - 2016-05-28 00:18 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-06-15 15:20 - 2016-05-28 00:18 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2016-06-15 15:20 - 2016-05-28 00:18 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2016-06-15 15:20 - 2016-05-28 00:18 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPSECSVC.DLL 2016-06-15 15:20 - 2016-05-28 00:18 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2016-06-15 15:20 - 2016-05-28 00:18 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2016-06-15 15:20 - 2016-05-28 00:17 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-06-15 15:20 - 2016-05-28 00:17 - 00963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2016-06-15 15:20 - 2016-05-28 00:17 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll 2016-06-15 15:20 - 2016-05-28 00:17 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2016-06-15 15:20 - 2016-05-28 00:17 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll 2016-06-15 15:20 - 2016-05-28 00:17 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2016-06-15 15:20 - 2016-05-28 00:17 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll 2016-06-15 15:20 - 2016-05-28 00:16 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-06-15 15:20 - 2016-05-28 00:16 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2016-06-15 15:20 - 2016-05-28 00:16 - 00684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2016-06-15 15:20 - 2016-05-28 00:16 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll 2016-06-15 15:20 - 2016-05-28 00:16 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2016-06-15 15:20 - 2016-05-28 00:16 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2016-06-15 15:20 - 2016-05-28 00:16 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\polstore.dll 2016-06-15 15:20 - 2016-05-28 00:16 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll 2016-06-15 15:20 - 2016-05-28 00:15 - 00794624 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2016-06-15 15:20 - 2016-05-28 00:15 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2016-06-15 15:20 - 2016-05-28 00:15 - 00293888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll 2016-06-15 15:20 - 2016-05-28 00:15 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2016-06-15 15:20 - 2016-05-28 00:14 - 18674176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-06-15 15:20 - 2016-05-28 00:14 - 01716736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2016-06-15 15:20 - 2016-05-28 00:14 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2016-06-15 15:20 - 2016-05-28 00:14 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-06-15 15:20 - 2016-05-28 00:14 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2016-06-15 15:20 - 2016-05-28 00:14 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2016-06-15 15:20 - 2016-05-28 00:13 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-06-15 15:20 - 2016-05-28 00:13 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2016-06-15 15:20 - 2016-05-28 00:13 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll 2016-06-15 15:20 - 2016-05-28 00:13 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2016-06-15 15:20 - 2016-05-28 00:13 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll 2016-06-15 15:20 - 2016-05-28 00:12 - 00614400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2016-06-15 15:20 - 2016-05-28 00:12 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll 2016-06-15 15:20 - 2016-05-28 00:11 - 01445888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll 2016-06-15 15:20 - 2016-05-28 00:11 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll 2016-06-15 15:20 - 2016-05-28 00:11 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll 2016-06-15 15:20 - 2016-05-28 00:11 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2016-06-15 15:20 - 2016-05-28 00:11 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll 2016-06-15 15:20 - 2016-05-28 00:09 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2016-06-15 15:20 - 2016-05-28 00:08 - 13385728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-06-15 15:20 - 2016-05-28 00:06 - 12128256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-06-15 15:20 - 2016-05-28 00:06 - 01339904 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2016-06-15 15:20 - 2016-05-28 00:05 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2016-06-15 15:20 - 2016-05-28 00:05 - 03664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-06-15 15:20 - 2016-05-28 00:05 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2016-06-15 15:20 - 2016-05-28 00:05 - 01797120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2016-06-15 15:20 - 2016-05-28 00:04 - 06973952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2016-06-15 15:20 - 2016-05-28 00:04 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll 2016-06-15 15:20 - 2016-05-28 00:04 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll 2016-06-15 15:20 - 2016-05-28 00:03 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2016-06-15 15:20 - 2016-05-28 00:03 - 01185280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFramework.dll 2016-06-15 15:20 - 2016-05-28 00:03 - 00693760 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll 2016-06-15 15:20 - 2016-05-28 00:03 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2016-06-15 15:20 - 2016-05-28 00:02 - 03590144 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-06-15 15:20 - 2016-05-28 00:02 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2016-06-15 15:20 - 2016-05-28 00:02 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll 2016-06-15 15:20 - 2016-05-28 00:02 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2016-06-15 15:20 - 2016-05-28 00:01 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2016-06-15 15:20 - 2016-05-28 00:01 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2016-06-15 15:20 - 2016-05-28 00:01 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-06-15 15:20 - 2016-05-28 00:01 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2016-06-15 15:20 - 2016-05-28 00:00 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-06-15 15:20 - 2016-05-28 00:00 - 03585536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll 2016-06-15 15:20 - 2016-05-28 00:00 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2016-06-15 15:20 - 2016-05-28 00:00 - 02230272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-06-15 15:20 - 2016-05-28 00:00 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2016-06-15 15:20 - 2016-05-28 00:00 - 01730560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-06-15 15:20 - 2016-05-28 00:00 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll 2016-06-15 15:20 - 2016-05-28 00:00 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2016-06-15 15:20 - 2016-05-28 00:00 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2016-06-15 15:20 - 2016-05-27 23:59 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2016-06-15 15:20 - 2016-05-27 23:58 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-06-15 15:20 - 2016-05-27 23:58 - 04896256 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-06-15 15:20 - 2016-05-27 23:58 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-06-15 15:20 - 2016-05-27 23:58 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2016-06-15 15:20 - 2016-05-27 23:57 - 02281472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-06-15 15:20 - 2016-05-27 23:55 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2016-06-15 15:20 - 2016-05-27 23:53 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll 2016-06-13 06:39 - 2016-06-13 06:39 - 00000000 ____D C:\Users\barry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-06-01 16:54 - 2016-06-01 16:54 - 00001744 _____ C:\Users\barry\Downloads\RegistrationCertificate.pdf 2016-05-27 07:11 - 2016-05-27 07:11 - 00010022 _____ C:\Users\barry\Downloads\Statement_201512.pdf 2016-05-27 07:11 - 2016-05-27 07:11 - 00009885 _____ C:\Users\barry\Downloads\Statement_201511.pdf 2016-05-27 07:11 - 2016-05-27 07:11 - 00009883 _____ C:\Users\barry\Downloads\Statement_201510.pdf 2016-05-27 07:10 - 2016-05-27 07:10 - 00010220 _____ C:\Users\barry\Downloads\Statement_201601.pdf 2016-05-27 07:09 - 2016-05-27 07:09 - 00010131 _____ C:\Users\barry\Downloads\Statement_201602.pdf 2016-05-27 07:09 - 2016-05-27 07:09 - 00010022 _____ C:\Users\barry\Downloads\Statement_201603.pdf 2016-05-27 07:08 - 2016-05-27 07:08 - 00010024 _____ C:\Users\barry\Downloads\Statement_201604.pdf ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-06-23 13:36 - 2014-09-29 11:27 - 00000556 _____ C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-578200233-972976924-3727881056-1001.job 2016-06-23 13:33 - 2016-01-06 14:33 - 00000911 _____ C:\WINDOWS\Tasks\EPSON WF-2660 Series Update {344C00C5-FF89-42A7-B4CE-885E058DDEAE}.job 2016-06-23 13:29 - 2012-04-09 06:51 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-06-23 13:24 - 2011-06-09 07:56 - 00000437 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics 2016-06-23 12:54 - 2012-02-13 13:27 - 00000000 ____D C:\Users\barry\AppData\Local\LogMeIn Rescue Applet 2016-06-23 12:34 - 2011-09-19 07:38 - 00004150 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{4956CE07-F149-4DCC-B940-D0F9B1BB6D33} 2016-06-23 12:23 - 2010-01-29 11:01 - 00000924 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-06-23 12:22 - 2015-06-22 06:12 - 00000918 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-578200233-972976924-3727881056-1001UA.job 2016-06-23 12:09 - 2015-05-31 08:16 - 00000652 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-578200233-972976924-3727881056-1001.job 2016-06-23 11:16 - 2015-10-30 03:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-06-23 11:16 - 2015-10-30 03:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-06-23 11:13 - 2014-10-05 21:12 - 00000000 ___RD C:\Users\barry\Dropbox 2016-06-23 11:11 - 2012-05-16 13:42 - 00000414 _____ C:\WINDOWS\Tasks\PC Optimizer Pro64 startups.job 2016-06-23 11:11 - 2010-01-29 11:01 - 00000920 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-06-23 11:09 - 2016-02-15 18:50 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-06-23 11:07 - 2015-10-30 02:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2016-06-23 08:09 - 2014-08-07 10:36 - 00000000 ____D C:\ProgramData\Norton 2016-06-23 08:08 - 2012-02-13 12:06 - 00001373 _____ C:\Users\barry\Desktop\Norton Installation Files.lnk 2016-06-23 07:43 - 2015-10-30 03:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2016-06-23 07:43 - 2014-10-08 07:28 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2016-06-23 07:43 - 2014-10-08 07:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2016-06-23 07:42 - 2015-04-13 08:14 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2016-06-22 23:34 - 2014-10-08 07:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2016-06-22 23:14 - 2014-08-07 09:27 - 00000000 ____D C:\Users\barry\AppData\Local\NPE 2016-06-22 23:07 - 2014-10-18 21:57 - 00000000 ____D C:\WINDOWS\system32\Drivers\N360x64 2016-06-22 23:07 - 2014-10-18 11:48 - 00000000 ____D C:\NPE 2016-06-22 23:03 - 2016-02-15 18:23 - 00000000 ____D C:\Users\barry 2016-06-22 18:00 - 2010-03-04 18:42 - 00000466 _____ C:\WINDOWS\Tasks\ParetoLogic Registration.job 2016-06-22 17:02 - 2016-02-15 18:23 - 00000000 ____D C:\Users\Administrator 2016-06-22 16:30 - 2015-10-30 03:21 - 00000000 ____D C:\WINDOWS\INF 2016-06-22 15:01 - 2011-01-13 08:13 - 00000000 ____D C:\Program Files (x86)\Content Manager 2016-06-21 21:10 - 2015-10-30 02:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2016-06-21 21:05 - 2014-10-18 21:59 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared 2016-06-21 20:58 - 2012-02-13 12:06 - 00000000 ___HD C:\Users\Public\Downloads\Norton 2016-06-21 20:53 - 2013-04-08 13:39 - 00000000 ____D C:\Users\barry\AppData\Roaming\BitTorrent 2016-06-21 20:53 - 2012-05-20 18:31 - 00000000 ____D C:\Users\barry\AppData\Roaming\uTorrent 2016-06-21 20:53 - 2012-01-05 16:11 - 00000000 ____D C:\Users\barry\AppData\Roaming\Skype 2016-06-21 20:53 - 2009-10-25 22:28 - 00000000 ____D C:\Users\barry\Tracing 2016-06-21 20:52 - 2015-10-30 03:24 - 00000000 ____D C:\WINDOWS\ModemLogs 2016-06-21 20:52 - 2011-08-30 07:04 - 00000000 ____D C:\Users\barry\AppData\Local\CrashDumps 2016-06-21 20:15 - 2010-04-14 21:44 - 00000000 ____D C:\Users\barry\AppData\LocalLow\Yahoo! 2016-06-21 20:15 - 2009-12-24 08:27 - 00000000 ____D C:\Users\barry\AppData\Roaming\Yahoo! 2016-06-21 20:14 - 2009-12-24 08:27 - 00000000 ____D C:\Program Files (x86)\Yahoo! 2016-06-20 10:50 - 2009-11-04 09:26 - 00000000 ___RD C:\Users\barry\Documents\Scanned Documents 2016-06-18 21:33 - 2015-10-30 03:24 - 00000000 ____D C:\WINDOWS\rescache 2016-06-18 21:02 - 2014-01-09 21:30 - 00002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-06-18 21:02 - 2011-06-09 07:48 - 00002279 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-06-18 20:22 - 2015-06-22 06:12 - 00000866 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-578200233-972976924-3727881056-1001Core.job 2016-06-17 07:40 - 2015-10-30 03:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-06-16 04:15 - 2016-02-15 22:31 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-06-16 04:13 - 2016-02-15 18:15 - 00350776 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-06-16 04:10 - 2015-10-30 03:24 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2016-06-16 04:10 - 2015-10-30 03:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2016-06-16 04:09 - 2015-10-30 03:24 - 00000000 ____D C:\WINDOWS\bcastdvr 2016-06-15 22:21 - 2015-05-31 08:16 - 00003808 _____ C:\WINDOWS\System32\Tasks\G2MUploadTask-S-1-5-21-578200233-972976924-3727881056-1001 2016-06-15 22:21 - 2014-09-29 11:27 - 00003712 _____ C:\WINDOWS\System32\Tasks\G2MUpdateTask-S-1-5-21-578200233-972976924-3727881056-1001 2016-06-15 22:19 - 2014-06-25 19:26 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-06-15 15:29 - 2012-05-17 09:27 - 142482544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-06-14 14:47 - 2015-12-19 09:45 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-06-14 14:33 - 2015-10-30 03:26 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2016-06-14 14:33 - 2015-10-30 03:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2016-06-13 06:40 - 2014-10-05 21:02 - 00000000 ____D C:\Users\barry\AppData\Roaming\Dropbox 2016-06-01 17:35 - 2014-10-19 07:14 - 00002122 _____ C:\Users\Public\Desktop\Google Slides.lnk 2016-06-01 17:35 - 2014-10-19 07:14 - 00002120 _____ C:\Users\Public\Desktop\Google Sheets.lnk 2016-06-01 17:35 - 2014-10-19 07:14 - 00002110 _____ C:\Users\Public\Desktop\Google Docs.lnk 2016-06-01 17:35 - 2014-10-19 07:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2016-05-28 01:55 - 2016-02-15 18:19 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll ==================== Files in the root of some directories ======= 2016-06-21 18:52 - 2011-09-20 07:40 - 0161744 _____ () C:\Program Files (x86)\0cres.dll 2013-08-11 10:26 - 2014-01-18 12:22 - 0000004 _____ () C:\Users\barry\AppData\Roaming\DE9A24 2016-06-23 12:54 - 2016-06-23 13:35 - 0000115 _____ () C:\Users\barry\AppData\Roaming\LogFile.txt 2013-08-11 10:26 - 2014-01-18 12:22 - 0870128 _____ () C:\Users\barry\AppData\Roaming\mcs.rma 2015-12-25 13:28 - 2015-12-25 13:28 - 0000268 ___RH () C:\Users\barry\AppData\Roaming\Organs 2015-12-25 13:30 - 2015-12-25 13:30 - 0000268 ___RH () C:\Users\barry\AppData\Roaming\Overdrive 2015-12-25 13:28 - 2015-12-25 13:28 - 0000268 ___RH () C:\Users\barry\AppData\Roaming\PDEs 2015-12-25 13:27 - 2015-12-25 13:27 - 0000268 ___RH () C:\Users\barry\AppData\Roaming\Pianos and Keyboards 2014-05-05 11:49 - 2016-05-11 08:22 - 0011570 _____ () C:\Users\barry\AppData\Roaming\wklnhst.dat 2016-02-15 16:11 - 2016-02-15 16:11 - 0000357 _____ () C:\Users\barry\AppData\Local\LMIR0005.tmp_r.bat 2016-06-23 11:23 - 2015-06-03 07:45 - 0016800 _____ () C:\Users\barry\AppData\Local\Z@!-b5177b70-c87f-40ac-ae0c-18ba8cdbb62d.tmp 2016-06-23 11:23 - 2015-06-03 07:45 - 0015776 _____ () C:\Users\barry\AppData\Local\Z@S!-a5bb627c-2e02-4e9b-a00d-312df5958e4f.tmp 2010-11-21 16:23 - 2014-06-12 14:32 - 0010454 _____ () C:\ProgramData\hpzinstall.log 2015-12-25 13:28 - 2015-12-25 13:28 - 0000268 ___RH () C:\ProgramData\PageLibraries 2015-12-25 13:30 - 2015-12-25 13:30 - 0000268 ___RH () C:\ProgramData\Pedal Hard 2015-12-25 13:28 - 2015-12-25 13:28 - 0000268 ___RH () C:\ProgramData\People 2015-12-25 13:27 - 2015-12-25 13:28 - 0000020 ____H () C:\ProgramData\PKP_DLeo.DAT 2015-12-25 13:30 - 2015-12-25 13:30 - 0000020 ____H () C:\ProgramData\PKP_DLes.DAT 2015-12-25 13:28 - 2015-12-25 14:26 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT 2015-12-25 13:28 - 2015-12-25 13:28 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT 2015-12-25 13:27 - 2015-12-25 13:28 - 0000012 ___RH () C:\ProgramData\Plants 2015-12-25 13:30 - 2015-12-25 13:30 - 0000012 ___RH () C:\ProgramData\Plug-Ins 2015-12-25 13:28 - 2015-12-25 13:28 - 0000012 ___RH () C:\ProgramData\Podcasting 2015-12-25 13:27 - 2015-12-25 13:27 - 0000012 ___RH () C:\ProgramData\Sampler Files 2016-06-23 11:24 - 2015-06-03 07:45 - 0016800 _____ () C:\ProgramData\Z@!-2c424899-5927-441c-abb4-5c744c517e6f.tmp Files to move or delete: ==================== C:\Users\Public\AlexaNSISPlugin.6100.dll Some files in TEMP: ==================== C:\Users\barry\AppData\Local\Temp\libeay32.dll C:\Users\barry\AppData\Local\Temp\msvcr120.dll C:\Users\barry\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2016-06-19 13:46 ==================== End of FRST.txt ============================