Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-08-2016 Ran by [removed] (31-08-2016 23:14:57) Running from C:\Users\[removed]\Desktop Windows 7 Home Premium Service Pack 1 (X64) (2011-05-28 04:17:51) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2651000027-1574550463-3293312737-500 - Administrator - Disabled) Guest (S-1-5-21-2651000027-1574550463-3293312737-501 - Limited - Disabled) Miller (S-1-5-21-2651000027-1574550463-3293312737-1000 - Administrator - Enabled) => C:\Users\Miller ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated) Apple Application Support (32-bit) (HKLM-x32\...\{D4B07658-F443-4445-A261-E643996E139D}) (Version: 4.3.2 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{A6B0442B-E159-444B-B49D-6B9AC531EAE3}) (Version: 4.3.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.) Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.) Ashampoo Burning Studio 6 FREE v.6.80 (HKLM-x32\...\Ashampoo Burning Studio 6 FREE_is1) (Version: 6.8.0 - ashampoo GmbH & Co. KG) ASUS AI Recovery (HKLM-x32\...\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}) (Version: 1.0.10 - ASUS) ASUS Data Security Manager (HKLM-x32\...\{FA2092C5-7979-412D-A962-6485274AE1EE}) (Version: 1.00.0014 - ASUS) ASUS Live Update (HKLM-x32\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.9 - ASUS) ASUS MultiFrame (HKLM-x32\...\{9D48531D-2135-49FC-BC29-ACCDA5396A76}) (Version: 1.0.0021 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.40 - ASUS) ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0008 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0028 - ASUS) ASUS Video Magic (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.4015 - CyberLink Corp.) ASUS Video Magic (x32 Version: 6.0.4015 - CyberLink Corp.) Hidden ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.20 - asus) ASUS WebStorage (HKLM-x32\...\ASUS WebStorage) (Version: 2.0.46.1429 - eCareme Technologies, Inc.) AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.3.585 - ASUSTEK) ATI AVIVO64 Codecs (Version: 11.6.0.50811 - ATI Technologies Inc.) Hidden ATI Catalyst Install Manager (HKLM\...\{FDB61EAE-7C1D-7EB6-E1EE-14528E3EB266}) (Version: 3.0.790.0 - ATI Technologies, Inc.) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0006 - ASUS) Bing Rewards Client Installer (x32 Version: 16.0.345.0 - Microsoft Corporation) Hidden Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Bookworm Deluxe (HKLM-x32\...\Bookworm Deluxe) (Version: - Oberon Media Inc.) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.5.0.0 - Canon Inc.) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.3.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.) Canon MG3500 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3500_series) (Version: 1.00 - Canon Inc.) Canon MG3500 series On-screen Manual (HKLM-x32\...\Canon MG3500 series On-screen Manual) (Version: 7.6.1 - Canon Inc.) Canon MG3500 series User Registration (HKLM-x32\...\Canon MG3500 series User Registration) (Version: - ‭Canon Inc.) Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version: - ) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 2.0.1 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 2.0.0 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.2.1 - Canon Inc.) ccc-core-static (x32 Version: 2010.0811.2122.36462 - ATI) Hidden Citrix Online Launcher (HKLM-x32\...\{678753E6-E526-4AE5-A144-00240772543A}) (Version: 1.0.393 - Citrix) Complément Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Complemento Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.127.0.61 - Conexant) Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation) ControlDeck (HKLM-x32\...\{5B65EF64-1DFA-414A-8C94-7BB726158E21}) (Version: 1.0.8 - ASUS) Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation) Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation) Cooking Dash (HKLM-x32\...\Cooking Dash) (Version: - Oberon Media Inc.) Crystal Reports for .NET Framework 2.0 (x86) (HKLM-x32\...\{7C05EEDD-E565-4E2B-ADE4-0C784C17311C}) (Version: 10.2.0 - Business Objects) CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1908 - CyberLink Corp.) CyberLink MediaShow Espresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 5.0.1606_25588 - CyberLink Corp.) CyberLink PhotoNow (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.) CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.) CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.2609a - CyberLink Corp.) CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.3009.50 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dropbox (HKU\S-1-5-21-2651000027-1574550463-3293312737-1000\...\Dropbox) (Version: 8.4.21 - Dropbox, Inc.) ETDWare PS/2-x64 7.0.5.11_WHQL (HKLM\...\Elantech) (Version: 7.0.5.11 - ELAN Microelectronics Corp.) Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.6 - ASUS) Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden GEO5 for Redi - Redi Rock Wall (x32 Version: 20.43.3 - Fine spol. s r.o.) Hidden GEO5 for Redi (HKLM-x32\...\GEO5Redi v11) (Version: - Fine spol. s r.o.) Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden Governor of Poker (HKLM-x32\...\Governor of Poker) (Version: - Oberon Media Inc.) HASP HL Device Driver (HKLM-x32\...\HASP HL Device Driver) (Version: - ) HumminbirdPC (HKLM-x32\...\{9EF1624B-3EF6-4D1F-8F6A-3F48DA9359E8}) (Version: 4.4.6 - Johnson Outdoors Inc) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.115.11 - Intel) iTunes (HKLM\...\{955524E7-79EB-4CA9-BA4D-FD2DF587651B}) (Version: 12.4.3.1 - Apple Inc.) JMicron Ethernet Adapter NDIS Driver (HKLM-x32\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.17.1 - JMicron Technology Corp.) JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.33.2 - JMicron Technology Corp.) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden K_Series_ScreenSaver_EN (HKLM-x32\...\K_Series_ScreenSaver_EN) (Version: - ) Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger 分享元件 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Messenger 浏览器插件 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft IntelliPoint 8.1 (HKLM\...\Microsoft IntelliPoint 8.1) (Version: 8.15.406.0 - Microsoft) Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) MotoHelper MergeModules (x32 Version: 1.2.0 - Motorola) Hidden Mozilla Firefox 47.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 47.0.1 (x86 en-US)) (Version: 47.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.1.6018 - Mozilla) Mozilla Thunderbird 45.3.0 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 45.3.0 (x86 en-US)) (Version: 45.3.0 - Mozilla) MSEW(3.0) (HKLM-x32\...\{D7D4A44A-9281-4032-B535-2083285EEABD}) (Version: 3.06.3000 - ADAMA Engineering, Inc.) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation) Nuance PDF Reader (HKLM-x32\...\{B480904D-F73F-4673-B034-8A5F492C9184}) (Version: 6.00.0041 - Nuance Communications, Inc.) QuickTime (HKLM-x32\...\{57752979-A1C9-4C02-856B-FBB27AC4E02C}) (Version: 7.69.80.9 - Apple Inc.) SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.14.0 - SAMSUNG Electronics Co., Ltd.) Sentinel HASP Run-time (HKLM-x32\...\{2A414CBE-CDF3-48C6-A91B-D3D4522F8EB5}) (Version: 5.10.1.17163 - SafeNet Inc.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) SpectraPave4 PRO (HKLM-x32\...\{CD3296B7-E070-43CA-87A2-A85A77DBFBAD}) (Version: 1.2.32 - Tensar International Corporation) syncables desktop SE (HKLM-x32\...\{341697D8-9923-445E-B42A-529E5A99CB7A}) (Version: 5.5.746.11492 - syncables) USB2.0 UVC VGA WebCam (HKLM\...\USB2.0 UVC VGA WebCam) (Version: 5.8.54000.207 - Sonix) Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies) Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.30.3 - ASUS) WinRAR 4.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH) Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.17 - ASUS) 用于远程连接的 Windows Live Mesh ActiveX 控件(简体中文) (HKLM-x32\...\{F992409C-9D10-4AE2-BAEB-B5409AD3785E}) (Version: 15.4.5722.2 - Microsoft Corporation) 適用遠端連線的 Windows Live Mesh ActiveX 控制項 (HKLM-x32\...\{622DE1BE-9EDE-49D3-B349-29D64760342A}) (Version: 15.4.5722.2 - Microsoft Corporation) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-2651000027-1574550463-3293312737-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Miller\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2651000027-1574550463-3293312737-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Miller\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2651000027-1574550463-3293312737-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Miller\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2651000027-1574550463-3293312737-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Miller\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2651000027-1574550463-3293312737-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Miller\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2651000027-1574550463-3293312737-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Miller\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2651000027-1574550463-3293312737-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Miller\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2651000027-1574550463-3293312737-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Miller\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2651000027-1574550463-3293312737-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Miller\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2651000027-1574550463-3293312737-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Miller\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2651000027-1574550463-3293312737-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Miller\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2651000027-1574550463-3293312737-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Miller\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2651000027-1574550463-3293312737-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Miller\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {1075DEB9-18A2-40C9-8577-A73B18F0FD27} - System32\Tasks\{E1569553-AE94-4877-9A36-9B3F21132E95} => E:\AUTORUN.EXE Task: {12D81885-BD01-4F47-B95B-98E862B11742} - System32\Tasks\{2D806EA6-E939-48D7-911A-A645E980718E} => C:\Program Files (x86)\Driven v1.2\setup32.exe [2011-01-13] () <==== ATTENTION Task: {135FA265-9973-4D42-91DF-8BCD474C9D6D} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-08-11] (ASUS) Task: {1CD4A8DB-3BEC-4613-AA36-5E793E7D5B76} - System32\Tasks\{3BD73B73-00F3-49BC-B2FE-DE55D899E922} => C:\Program Files (x86)\Driven v1.2\setup32.exe [2011-01-13] () <==== ATTENTION Task: {1ED48C0C-9DCB-4381-84B3-77B503F6C964} - System32\Tasks\{B2A48363-F296-43E2-BB36-6177A7CE8796} => E:\AUTORUN.EXE Task: {1F4A54B6-7FB8-4548-AD9B-040F2481F7A4} - System32\Tasks\{94C40670-DC40-48EB-A3A3-11E8F0C8577B} => E:\AUTORUN.EXE Task: {24D94B33-8ED7-475B-95DF-9168018A5F0F} - System32\Tasks\{5B348CF1-E7A7-4882-B193-613E1254E7D6} => E:\AUTORUN.EXE Task: {2FCB07DB-4984-424E-B8C6-A6D3715C0E39} - System32\Tasks\{A8E02C09-7B39-48CB-B89A-0C927F8747DC} => E:\AUTORUN.EXE Task: {3745FAE1-FC8C-4C6C-91B9-B3D1107BF4D8} - System32\Tasks\{0A99F083-0176-49CF-A3D1-4E909FFB5A26} => E:\AUTORUN.EXE Task: {3B1681A8-3760-476A-8655-0544DA1C8DDB} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK) Task: {403DE1C5-A080-4CB1-8338-09F9D8289A7D} - System32\Tasks\{D592DE13-0DD9-4491-B4EA-E3160E42F733} => E:\AUTORUN.EXE Task: {4B542325-AA70-43C8-A23F-CD059F17D888} - System32\Tasks\{8F3A898A-51B0-44AB-87F2-E9E1299A52DB} => E:\AUTORUN.EXE Task: {56D22524-926F-4A38-906E-65DEE5879AF1} - System32\Tasks\{D4C52B54-FBE3-43E6-8866-605E7B82D785} => C:\Program Files (x86)\Driven v1.2\setup32.exe [2011-01-13] () <==== ATTENTION Task: {5A95AE4D-7AD9-4401-9226-7E3819E1AF43} - System32\Tasks\{A9806E08-4FC8-4232-9492-2CD01BA1BBE1} => E:\AUTORUN.EXE Task: {5D9F0375-49CB-4B7A-9B40-748BDC2FCE1E} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2651000027-1574550463-3293312737-1000UA => C:\Users\Miller\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-02] (Dropbox, Inc.) Task: {606599F0-EDEB-401F-B1F2-124DAF8311D9} - System32\Tasks\{A7ED2BD7-70AB-49E8-A793-86841C8D5D93} => E:\AUTORUN.EXE Task: {66C6E33F-9E10-4E7F-8D4C-7FA5B9458C77} - System32\Tasks\{FF937E65-C020-4213-AA70-24D7F9F93684} => pcalua.exe -a E:\MSETUP.EXE -d E:\ Task: {6BADE1E8-088C-49FF-98C3-438B1A9F752C} - System32\Tasks\{95CF6177-9924-4EE6-AAFD-BE5EF3D42E22} => E:\AUTORUN.EXE Task: {745BFE3F-80D8-4D10-88F5-5FA803DF436C} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv => C:\Windows\TEMP\{B694ABA9-411B-4A2B-A6AC-51FFF2DA225F}.exe <==== ATTENTION Task: {790BCB5F-F608-4E24-AE41-42EE47A34A81} - System32\Tasks\{F02559F3-A506-4741-B7AC-196DA47FF870} => E:\AUTORUN.EXE Task: {7CBA6D00-D6FD-488D-A405-EAA782396ACB} - System32\Tasks\{76A98CAC-39AE-4D8B-8451-F466119C079C} => C:\Program Files (x86)\Driven v1.2\setup32.exe [2011-01-13] () <==== ATTENTION Task: {7D25D9C6-7DC9-4AD6-9CE8-D32631F86244} - System32\Tasks\{CBAC3919-6EE7-4AE8-9DC8-A0F3E7A99E3C} => E:\AUTORUN.EXE Task: {7D9FF5F3-3D2A-4485-99B1-C763C9C1FD7E} - System32\Tasks\{C6FEEED2-1296-4F15-B2D0-E3C61C099EEE} => E:\AUTORUN.EXE Task: {81DB0E5A-AE30-419D-913B-5A24CFFB260F} - System32\Tasks\{A14833D2-54D7-4577-8CAB-253192FC013E} => E:\AUTORUN.EXE Task: {84ED6368-A4B8-45E3-9516-639F6A601F16} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {88CE4A41-3DCC-4ECF-A62B-2E9FFB5196E8} - System32\Tasks\{22685A03-55EB-4F00-86F4-F9270A598020} => E:\AUTORUN.EXE Task: {8E3D6A73-51C3-41C1-9118-0896CA86C192} - System32\Tasks\{57CB5152-5E0B-42A2-A967-5B30EC91C25D} => C:\Program Files (x86)\Driven v1.2\setup32.exe [2011-01-13] () <==== ATTENTION Task: {9812FB6F-DCE8-468D-815B-4F58469753C0} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-07-31] (ASUS) Task: {9D48CAC6-C6F0-4640-9396-3308608720F4} - System32\Tasks\{93383623-0283-47DC-8833-C5B688871329} => E:\AUTORUN.EXE Task: {A3495C98-66B2-47FA-BCDC-58F14EC70C12} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2651000027-1574550463-3293312737-1000Core => C:\Users\Miller\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-02] (Dropbox, Inc.) Task: {AB7A04A1-156B-4796-A035-09A6D15CDB9F} - System32\Tasks\{FE3930D7-B9DD-4001-BF62-87B50DF4E453} => C:\Program Files (x86)\Driven v1.2\setup32.exe [2011-01-13] () <==== ATTENTION Task: {ADCFF0E4-81A4-426F-97C9-1F277443D30E} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] () Task: {AE8CCE6B-3DA9-448B-B53A-01BD3D4FA5AA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {B62F4DFB-3460-4560-ABD4-2285A83F9A8A} - System32\Tasks\{353D5C07-2F62-4108-A82A-63F336DDFC7C} => E:\AUTORUN.EXE Task: {CCFF06D5-3358-47D0-ABB3-212F56330D7B} - System32\Tasks\{DB4440FE-66B8-4180-B609-58441CA3F6A8} => C:\Program Files (x86)\Driven v1.2\setup32.exe [2011-01-13] () <==== ATTENTION Task: {CF2A6A93-959F-46F0-BC1F-863991B8C2F6} - System32\Tasks\{A3FE5CDA-7ECD-40D0-B907-0C0ABEF6171E} => C:\Program Files (x86)\Driven v1.2\setup32.exe [2011-01-13] () <==== ATTENTION Task: {D0F91D1C-F9BD-40DA-9930-7165ABCB8936} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17] (ASUS) Task: {D10B4296-B30F-4AAD-9C54-7623296FFFA4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.) Task: {D46E1232-D810-44C0-9AE6-9A1E5E4E2B94} - System32\Tasks\{F90B011A-80BA-4ADF-AE48-4E3AA91E2214} => E:\AUTORUN.EXE Task: {D90ED47A-3D41-4F9C-B07C-4BB41202731F} - System32\Tasks\{9EB81200-CADD-44E0-8957-EC0D118CC5DC} => pcalua.exe -a "C:\Program Files (x86)\Driven v1.2\setup32.exe" -d "C:\Program Files (x86)\Driven v1.2" Task: {DEFF8B62-5064-43AD-B6FF-46CEC85D3BB8} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{742D328E-02D2-4F3E-A4C8-4A40D5F2858F}.exe <==== ATTENTION Task: {E554A557-39DD-4673-978E-ED4E821C990B} - System32\Tasks\{D08C5DD2-9C54-4EFB-B8A7-0BC1C41DD107} => E:\AUTORUN.EXE Task: {E66BC01F-49FF-4964-AAFD-7CEB0CEC6DE7} - System32\Tasks\{4CCCE7CC-B114-48A7-A562-16C59CEAC3C6} => E:\AUTORUN.EXE Task: {ED856335-955F-4307-8061-B7DC8415DEE1} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-04-13] (Microsoft Corporation) Task: {EEE8787D-82B5-4E00-A3AF-E4DF2FD6C2E4} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe [2010-06-09] (asus) Task: {F2D1FC3C-7B9A-4955-A2EA-07D4904902E1} - System32\Tasks\{0FA125FE-C578-4046-A049-7D4501F7CA54} => E:\AUTORUN.EXE Task: {F9F70C7B-6EF1-45D9-8DD3-09E7DFF9CB98} - System32\Tasks\{02DF3295-474A-4F2A-B59B-F7E0F900B58D} => C:\Program Files (x86)\Driven v1.2\setup32.exe [2011-01-13] () <==== ATTENTION (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => C:\Windows\TEMP\{B694ABA9-411B-4A2B-A6AC-51FFF2DA225F}.exe <==== ATTENTION Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{742D328E-02D2-4F3E-A4C8-4A40D5F2858F}.exe <==== ATTENTION Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2651000027-1574550463-3293312737-1000Core.job => C:\Users\Miller\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2651000027-1574550463-3293312737-1000UA.job => C:\Users\Miller\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2016-03-18 22:56 - 2016-03-18 22:56 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2016-07-05 15:23 - 2016-07-05 15:23 - 01354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2010-07-14 19:11 - 2010-07-14 19:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll 2008-10-01 02:02 - 2008-10-01 02:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll 2011-01-24 13:22 - 2007-11-30 14:20 - 00051768 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe 2007-06-15 13:28 - 2007-06-15 13:28 - 00104960 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt64.dll 2007-06-01 19:52 - 2007-06-01 19:52 - 00159744 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll 2010-03-15 20:48 - 2010-03-15 20:48 - 00148816 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\EcaremeDLL.dll 2011-01-24 12:57 - 2011-01-24 12:57 - 00030032 _____ () C:\Windows\assembly\GAC_MSIL\SqliteShared\1.0.3726.20828__0d0f4b69e50e559b\SqliteShared.dll 2011-01-24 12:57 - 2011-01-24 12:57 - 00931840 _____ () C:\Windows\assembly\GAC_64\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll 2010-03-15 20:48 - 2010-03-15 20:48 - 01754448 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe 2010-07-02 16:36 - 2010-07-02 16:36 - 01597440 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe 2011-01-24 12:40 - 2010-04-06 01:29 - 00244904 _____ () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe 2015-12-09 23:36 - 2016-07-11 21:07 - 00035792 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd 2016-08-24 15:37 - 2016-07-11 21:07 - 00145864 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\pyexpat.pyd 2016-08-24 15:37 - 2016-07-11 21:07 - 00019408 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\faulthandler.pyd 2016-08-24 15:37 - 2016-07-11 21:07 - 00116688 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\pywintypes27.dll 2015-12-09 23:36 - 2016-07-11 21:07 - 00100296 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\_ctypes.pyd 2015-12-09 23:36 - 2016-07-11 21:07 - 00018888 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\select.pyd 2015-12-09 23:36 - 2016-08-23 18:17 - 00019760 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd 2015-12-09 23:36 - 2016-07-11 21:07 - 00694224 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\unicodedata.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00020816 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd 2015-12-09 23:36 - 2016-07-11 21:07 - 00123856 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 01682760 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00020808 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd 2016-08-07 08:27 - 2016-08-23 18:17 - 00021312 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00052024 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd 2015-12-09 23:36 - 2016-07-11 21:09 - 00105928 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\win32api.pyd 2016-08-07 08:27 - 2016-08-23 18:17 - 00025424 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00038696 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\fastpath.pyd 2016-08-24 15:37 - 2016-07-11 21:07 - 00392144 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\pythoncom27.dll 2016-08-24 15:37 - 2016-07-11 21:09 - 00020936 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\mmapfile.pyd 2015-12-09 23:36 - 2016-07-11 21:09 - 00024528 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\win32event.pyd 2015-12-09 23:36 - 2016-07-11 21:09 - 00114640 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\win32security.pyd 2015-12-09 23:36 - 2016-08-23 18:17 - 00381752 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd 2015-12-09 23:36 - 2016-07-11 21:09 - 00124880 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\win32file.pyd 2015-12-09 23:36 - 2016-07-11 21:09 - 00024016 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\win32clipboard.pyd 2015-12-09 23:36 - 2016-07-11 21:09 - 00175560 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\win32gui.pyd 2015-12-09 23:36 - 2016-07-11 21:09 - 00030160 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\win32pipe.pyd 2015-12-09 23:36 - 2016-07-11 21:09 - 00043472 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\win32process.pyd 2015-12-09 23:36 - 2016-07-11 21:09 - 00048592 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\win32service.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00026456 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd 2015-12-09 23:36 - 2016-07-11 21:09 - 00057808 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\win32evtlog.pyd 2015-12-09 23:36 - 2016-07-11 21:09 - 00024016 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\win32profile.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00246592 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd 2015-12-09 23:36 - 2016-07-11 21:09 - 00028616 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\win32ts.pyd 2016-02-18 11:32 - 2016-08-23 18:17 - 00020800 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\winffi.iphlpapi._winffi_iphlpapi.pyd 2016-02-18 11:32 - 2016-08-23 18:17 - 00019776 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\winffi.winerror._winffi_winerror.pyd 2016-02-18 11:32 - 2016-08-23 18:17 - 00020800 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\winffi.wininet._winffi_wininet.pyd 2015-12-09 23:36 - 2016-07-11 21:07 - 00144848 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\_elementtree.pyd 2016-08-07 08:27 - 2016-07-11 21:08 - 00241104 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\_jpegtran.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00020280 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd 2015-12-09 23:36 - 2016-08-23 18:17 - 00023376 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd 2015-12-09 23:36 - 2016-07-11 21:09 - 00350152 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\winxpgui.pyd 2016-02-18 11:32 - 2016-08-23 18:17 - 00022352 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00024392 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd 2016-08-24 15:37 - 2016-07-11 21:09 - 00036296 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\librsync.dll 2016-08-24 15:37 - 2016-08-23 18:17 - 00084280 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL 2016-08-24 15:37 - 2016-08-23 18:17 - 01826096 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd 2015-12-09 23:36 - 2016-07-11 21:07 - 00083912 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\sip.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 03929392 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 01972016 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00531248 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00132912 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00224056 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00207672 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd 2016-08-07 08:27 - 2016-08-23 18:17 - 00020288 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\winffi.user32._winffi_user32.pyd 2015-12-09 23:36 - 2016-07-11 21:09 - 00060880 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\win32print.pyd 2016-08-07 08:27 - 2016-08-23 18:17 - 00024904 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00546096 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00357680 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00168248 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd 2016-08-24 15:37 - 2016-08-23 18:17 - 00042808 _____ () C:\Users\Miller\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd 2009-11-02 17:20 - 2009-11-02 17:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll 2009-11-02 17:23 - 2009-11-02 17:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll 2010-02-23 18:14 - 2010-02-23 18:14 - 00041472 _____ () C:\Program Files (x86)\ASUS\ControlDeck\HelpFunc.dll 2010-02-23 18:14 - 2010-02-23 18:14 - 00071680 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Brightness.dll 2010-02-23 18:11 - 2010-02-23 18:11 - 00076288 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Volume.dll 2010-02-23 18:12 - 2010-02-23 18:12 - 00186880 _____ () C:\Program Files (x86)\ASUS\ControlDeck\Resolution.dll 2010-02-23 18:14 - 2010-02-23 18:14 - 00050688 _____ () C:\Program Files (x86)\ASUS\ControlDeck\P4GControl.dll 2007-06-15 13:28 - 2007-06-15 13:28 - 00147456 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll 2007-06-01 20:08 - 2007-06-01 20:08 - 00143360 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2651000027-1574550463-3293312737-1000\Control Panel\Desktop\\Wallpaper -> DNS Servers: 10.0.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupreg: ADSMTray => C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{B7AF5705-B13A-4BF1-AA04-1949410B3737}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector\PDR.EXE FirewallRules: [{0A9085AC-C392-4F15-9BC2-96B9194DE272}] => (Allow) C:\Program Files (x86)\Cyberlink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe FirewallRules: [{4CB215A0-A0FB-4615-A6B3-64F5E3765ED5}] => (Allow) C:\Program Files (x86)\Cyberlink\PowerDVD9\PowerDVD9.EXE FirewallRules: [{FC64535E-7EA4-4B52-99C7-3CD678989223}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{0B061673-7324-4C23-9050-E3A348AE3D6D}] => (Allow) LPort=2869 FirewallRules: [{89A598EA-C2BE-4AEF-855A-3B30AC6F692C}] => (Allow) LPort=1900 FirewallRules: [{C670C943-75B6-47F5-9C7A-59800F959536}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{9B7CC77A-9648-48BD-A2AA-7130E127C9EC}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe FirewallRules: [{F0FA6569-576A-4DFA-8DBC-79219E48E1C0}] => (Allow) LPort=5353 FirewallRules: [{D6032FE9-E4CA-4001-BA99-1066D65E72C6}] => (Allow) LPort=8182 FirewallRules: [{BE34231F-19EA-4ADD-9C70-8A99F6BEF373}] => (Allow) C:\Program Files (x86)\AVG\AVG10\avgmfapx.exe FirewallRules: [{D6FE4203-AFE1-4626-AF9B-9AE6E5939217}] => (Allow) C:\Program Files (x86)\AVG\AVG10\avgmfapx.exe FirewallRules: [{6D2D13CD-A826-4367-A26A-2D4938EF1AF0}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe FirewallRules: [{46F61BCC-EDBE-429A-AC87-512A3D8B1B39}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe FirewallRules: [{0B8671AD-F82D-4EDC-8C94-8CE006400B09}] => (Allow) C:\Windows\system32\hasplms.exe FirewallRules: [{97309068-776D-4A35-AB53-52BF2A3582D4}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe FirewallRules: [{F0A29395-25FD-4F21-BB03-9D28FE8CDB99}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe FirewallRules: [TCP Query User{E5D8700F-BC00-4AE5-B4C6-2125AFCE5453}C:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe] => (Block) C:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe FirewallRules: [UDP Query User{A8E1F477-9076-4857-B18F-3136673E39EB}C:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe] => (Block) C:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe FirewallRules: [{41C1450C-84D3-4966-8D2F-E54C5FEDBB2F}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe FirewallRules: [{3A370AB1-36CF-4F72-9290-2ABCA2F0259E}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe FirewallRules: [{B66BFA5D-E6EE-4F48-B6E5-EDC74CD78555}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe FirewallRules: [{7B9B7ECE-00E0-41CF-B535-A2F6A1262ABF}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe FirewallRules: [{C002D76F-52C0-4E3F-A38E-041D46BAFB1D}] => (Allow) C:\Users\Miller\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{09C9A46F-ABAA-4D86-93A0-B290CBB493F2}] => (Allow) C:\Users\Miller\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{8CD52B4B-9314-44C8-AF15-046DC20345AE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{C81ABB34-6D07-4DC4-B08B-6610EB4E0A49}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{F923DF4F-A5D9-44B0-8611-3F2BBDFAF816}C:\users\miller\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\miller\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [UDP Query User{40BFDDA8-8606-42D7-8154-A1327E3B66F9}C:\users\miller\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\miller\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [{C4EDD6EF-6FCD-47A3-8C08-6BCF974B0C62}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{DFB7C8CA-4F1D-4DA2-8258-7223CEDF9B9F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{D1334DDB-08A4-4911-8B1F-68937DAD3BC2}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{33D940CF-73BD-47F2-83F3-0810DB2ACAD4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{81E36C26-0B0D-4191-A6BF-88DCBF37B81B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{50AEADB4-70BF-4DAC-886F-E8B20EE0FEAC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{E075BF26-760E-4BCE-898D-95F99724A404}] => (Allow) C:\Program Files\iTunes\iTunes.exe ==================== Restore Points ========================= 30-08-2016 03:00:32 Windows Update 30-08-2016 08:53:53 Checkpoint by HitmanPro 30-08-2016 08:55:35 Checkpoint by HitmanPro 30-08-2016 09:49:33 JRT Pre-Junkware Removal 30-08-2016 10:28:04 Windows Update 30-08-2016 22:58:57 Windows Update 31-08-2016 08:18:37 Windows Update ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (08/31/2016 11:13:14 PM) (Source: Software Protection Platform Service) (EventID: 8211) (User: ) Description: Update Windows license and product key tokens failed with 0x80070780. C:\Windows\system32\spp\tokens\addons\ocur\ocur-retail-1-pl-rtm.xrm-ms Error: (08/31/2016 11:00:59 PM) (Source: Software Protection Platform Service) (EventID: 8211) (User: ) Description: Update Windows license and product key tokens failed with 0x80070780. C:\Windows\system32\spp\tokens\addons\ocur\ocur-retail-1-pl-rtm.xrm-ms Error: (08/31/2016 10:38:23 PM) (Source: Software Protection Platform Service) (EventID: 8211) (User: ) Description: Update Windows license and product key tokens failed with 0x80070780. C:\Windows\system32\spp\tokens\addons\ocur\ocur-retail-1-pl-rtm.xrm-ms Error: (08/31/2016 11:19:55 AM) (Source: Software Protection Platform Service) (EventID: 8211) (User: ) Description: Update Windows license and product key tokens failed with 0x80070780. C:\Windows\system32\spp\tokens\addons\ocur\ocur-retail-1-pl-rtm.xrm-ms Error: (08/31/2016 08:35:50 AM) (Source: Software Protection Platform Service) (EventID: 8211) (User: ) Description: Update Windows license and product key tokens failed with 0x80070780. C:\Windows\system32\spp\tokens\addons\ocur\ocur-retail-1-pl-rtm.xrm-ms Error: (08/31/2016 08:35:49 AM) (Source: Software Protection Platform Service) (EventID: 8211) (User: ) Description: Update Windows license and product key tokens failed with 0x80070780. C:\Windows\system32\spp\tokens\addons\ocur\ocur-retail-1-pl-rtm.xrm-ms Error: (08/31/2016 08:34:34 AM) (Source: Software Protection Platform Service) (EventID: 8211) (User: ) Description: Update Windows license and product key tokens failed with 0x80070780. C:\Windows\system32\spp\tokens\addons\ocur\ocur-retail-1-pl-rtm.xrm-ms Error: (08/31/2016 08:20:45 AM) (Source: Software Protection Platform Service) (EventID: 8211) (User: ) Description: Update Windows license and product key tokens failed with 0x80070780. C:\Windows\system32\spp\tokens\addons\ocur\ocur-retail-1-pl-rtm.xrm-ms Error: (08/31/2016 08:20:45 AM) (Source: Software Protection Platform Service) (EventID: 8211) (User: ) Description: Update Windows license and product key tokens failed with 0x80070780. C:\Windows\system32\spp\tokens\addons\ocur\ocur-retail-1-pl-rtm.xrm-ms Error: (08/31/2016 08:18:37 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object. Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System Error: The file cannot be accessed by the system. . System errors: ============= Error: (08/31/2016 08:46:50 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070780: Cumulative Security Update for Internet Explorer 11 for Windows 7 for x64-based Systems (KB3175443). Error: (08/31/2016 08:35:46 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: The Diagnostics Tracking Service service terminated with the following error: %%-2147022976 = The file cannot be accessed by the system. Error: (08/31/2016 08:32:08 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: The Windows Update service hung on starting. Error: (08/31/2016 08:30:03 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: The Windows Search service hung on starting. Error: (08/31/2016 08:25:20 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: The Intel(R) Management & Security Application User Notification Service service hung on starting. Error: (08/31/2016 08:22:41 AM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1000) (User: NT AUTHORITY) Description: CBS Client initialization failed. Last error: 0x80080005 Error: (08/31/2016 08:22:41 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: The server {752073A1-23F2-4396-85F0-8FDB879ED0ED} did not register with DCOM within the required timeout. Error: (08/31/2016 08:20:39 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: The Diagnostics Tracking Service service terminated with the following error: %%-2147022976 = The file cannot be accessed by the system. Error: (08/31/2016 07:00:14 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070780: Cumulative Security Update for Internet Explorer 11 for Windows 7 for x64-based Systems (KB3175443). Error: (08/31/2016 06:49:04 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: The Diagnostics Tracking Service service terminated with the following error: %%-2147022976 = The file cannot be accessed by the system. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7 CPU Q 740 @ 1.73GHz Percentage of memory in use: 55% Total physical RAM: 4020.51 MB Available physical RAM: 1800.65 MB Total Virtual: 8039.21 MB Available Virtual: 5632.21 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:119.7 GB) (Free:29.25 GB) NTFS ==>[system with boot components (obtained from drive)] Drive d: (Data) (Fixed) (Total:324.58 GB) (Free:323.81 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 39615B48) Partition 1: (Not Active) - (Size=21.5 GB) - (Type=1C) Partition 2: (Active) - (Size=119.7 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=324.6 GB) - (Type=OF Extended) ==================== End of Addition.txt ============================