Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-05-2017
Ran by [removed] (administrator) on PAT-PC (06-05-2017 14:29:58)
Running from C:\Users\[removed]\Downloads
[removed]
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Safer Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
() C:\ProgramData\Avg_Update_0716wt\AVG-Secure-Search-Update_0716wt.exe
() C:\ProgramData\Avg_Update_0716wt\AVG-Secure-Search-Update_0716wt.exe
() C:\ProgramData\Avg_Update_0217wt\AVG-Secure-Search-Update_0217wt.exe
() C:\ProgramData\Avg_Update_0217wt\AVG-Secure-Search-Update_0217wt.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\aswidsagent.exe
(Trend Micro Inc.) C:\Users\Pat\Downloads\HijackThis.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [611672 2009-09-17] (TOSHIBA Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1545512 2009-07-20] (Synaptics Incorporated)
HKLM\...\Run: [SVPWUTIL] => C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe [352256 2009-07-09] (TOSHIBA CORPORATION)
HKLM\...\Run: [SmoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [460088 2009-07-28] (TOSHIBA Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7625248 2009-07-29] (Realtek Semiconductor)
HKLM\...\Run: [HWSetup] => C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [425984 2009-06-02] (TOSHIBA Electronics, Inc.)
HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [738616 2009-08-05] (TOSHIBA Corporation)
HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguirnx.exe [220288 2017-04-27] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [263088 2017-05-06] (AVG Technologies CZ, s.r.o.)
HKLM\...\Policies\Explorer: [NoSetActiveDesktop] 0
HKU\S-1-5-21-2802963544-327318797-2809920788-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7348440 2017-03-03] (Piriform Ltd)
HKU\S-1-5-21-2802963544-327318797-2809920788-1000\...\Run: [Google Update] => C:\Users\Pat\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateCore.exe [601168 2017-04-28] (Google Inc.)
HKU\S-1-5-21-2802963544-327318797-2809920788-1000\...\Policies\Explorer: [NoSetActiveDesktop] 0
HKU\S-1-5-21-2802963544-327318797-2809920788-1000\...\MountPoints2: {05eefb8c-71c7-11e1-b698-002622e61fc9} - F:\TLBootstrap_WPP.exe
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [147456 2008-12-12] (Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76 75.75.76.76
Tcpip\..\Interfaces\{219371BE-3DFD-40B1-B3EE-A911BA750FF6}: [DhcpNameServer] 75.75.75.75 75.75.76.76 75.75.76.76

Internet Explorer:
==================
HKU\S-1-5-21-2802963544-327318797-2809920788-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
HKU\S-1-5-21-2802963544-327318797-2809920788-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSNA&bmod=TSNA
SearchScopes: HKLM -> DefaultScope {BB793768-4B34-4C65-86D4-4CA7D5E7FA4F} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0B4A10D1-FBD6-451d-BFDA-F03252B05984} URL = hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=2706&query={searchTerms}&invocationType=tb50-ie-aim-chromesbox-en-us
SearchScopes: HKLM -> {BB793768-4B34-4C65-86D4-4CA7D5E7FA4F} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA
SearchScopes: HKU\.DEFAULT -> DefaultScope {BB793768-4B34-4C65-86D4-4CA7D5E7FA4F} URL = 
SearchScopes: HKU\S-1-5-21-2802963544-327318797-2809920788-1000 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = 
SearchScopes: HKU\S-1-5-21-2802963544-327318797-2809920788-1000 -> {0B4A10D1-FBD6-451d-BFDA-F03252B05984} URL = hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=2706&query={searchTerms}&invocationType=tb50-ie-aim-chromesbox-en-us
SearchScopes: HKU\S-1-5-21-2802963544-327318797-2809920788-1000 -> {87814AF8-FEB5-4C6D-9F67-CA22F464AB66} URL = hxxps://search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-2802963544-327318797-2809920788-1000 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://www.ask.com/web?q={SEARCHTERMS}&o=15527&l=dis&prt=NSS&chn=retail&geo=US&ver=4
SearchScopes: HKU\S-1-5-21-2802963544-327318797-2809920788-1000 -> {B7BE46A8-B1C3-4403-96E9-97B5AC4D910C} URL = hxxp://www.search.ask.com/web?tpid=ORJ-ST-SPE&o=APN11463&pf=V7&p2=^BE9^OSJ000^YY^US&gct=&itbv=12.18.0.81&apn_uid=9C8F219C-FD02-4DBD-9A3E-899491414C0B&apn_ptnrs=BE9&apn_dtid=^OSJ000^YY^US&apn_dbr=ff_33.0.0.5397&doi=2014-10-21&trgb=FF&q={searchTerms}&psv=&pt=tb
SearchScopes: HKU\S-1-5-21-2802963544-327318797-2809920788-1000 -> {BB793768-4B34-4C65-86D4-4CA7D5E7FA4F} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA_enUS356
BHO: No Name -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
BHO: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26] (Safer Networking Limited)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-01-22] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
BHO: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files\Windows Live\Companion\companioncore.dll [2011-05-13] (Microsoft Corporation)
BHO: Arcadesafari BHO -> {adff4c9a-4f49-4a1f-8885-360e107b7938} -> C:\windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-22] (Oracle Corporation)
Toolbar: HKU\.DEFAULT -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKU\S-1-5-21-2802963544-327318797-2809920788-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKU\S-1-5-21-2802963544-327318797-2809920788-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
Toolbar: HKU\S-1-5-21-2802963544-327318797-2809920788-1000 -> No Name - {4153492D-4700-A76A-76A7-7A786E7484D7} -  No File
DPF: {CAFEEFAC-0018-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Pat\AppData\Roaming\TomTom\HOME\Profiles\obm6clih.default [2015-12-09]
FF Extension: (Map status indicator) - C:\Program Files\TomTom HOME 2\xul\extensions\[removed] [2011-07-09] [not signed]
FF ProfilePath: C:\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\v1kw8rww.default [2017-05-06]
FF user.js: detected! => C:\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\v1kw8rww.default\user.js [2012-02-01]
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\v1kw8rww.default -> Ask Search
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\v1kw8rww.default -> Ask Search
FF Homepage: Mozilla\Firefox\Profiles\v1kw8rww.default -> hxxps://www.facebook.com
FF Extension: (Shield Recipe Client) - C:\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\v1kw8rww.default\features\{3798c779-bc39-4178-adbd-01c5088df954}\[removed] [2017-05-02]
FF SearchPlugin: C:\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\v1kw8rww.default\searchplugins\aim-search.xml [2010-03-24]
FF Extension: (Java Console) - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2017-05-06] [not signed]
FF Extension: (Java Console) - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2017-05-06] [not signed]
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\18.9.0.230 => not found
FF HKU\S-1-5-21-2802963544-327318797-2809920788-1000\...\Firefox\Extensions: [[removed]] - C:\Users\Pat\AppData\Local\Arcadesafari\[removed] => not found
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\avg-secure-search.xml [2016-08-22]
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_25_0_0_148.dll [2017-04-11] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2009-11-12] ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2009-11-13] (DivX,Inc.)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll [2009-11-13] (DivX, Inc)
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-01-22] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-22] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin: @oberon-media.com/ONCAdapter -> C:\Program Files\Common Files\Oberon Media\NCAdapter\1.0.0.14\npapicomadapter.dll [No File]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-2802963544-327318797-2809920788-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Pat\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-2802963544-327318797-2809920788-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Pat\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-2802963544-327318797-2809920788-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Pat\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2009-11-30] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll [2009-11-13] (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2010-08-17] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2010-08-17] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2010-08-17] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2010-08-17] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2010-08-17] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2010-08-17] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2010-08-17] (Apple Inc.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2009-11-12]

Chrome: 
=======
CHR DefaultProfile: Default
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?p={searchTerms}&fr=yset_chr_syc_oracle&type=default
CHR DefaultSearchKeyword: Default -> Yahoo
CHR DefaultSuggestURL: Default -> hxxps://search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10
CHR Profile: C:\Users\Pat\AppData\Local\Google\Chrome\User Data\Default [2017-05-06]
CHR Extension: (Yahoo Partner) - C:\Users\Pat\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaffhmecfaelkngcbnfdkcckmillnoki [2017-03-30]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Pat\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-30]
CHR Extension: (Yahoo Partner) - C:\Users\Pat\AppData\Local\Google\Chrome\User Data\Default\Extensions\nogdfjjfhknacchjpiccacoimeelkajb [2016-10-20]
CHR Extension: (Chrome Media Router) - C:\Users\Pat\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-03-30]
CHR HKLM\...\Chrome\Extension: [aaffhmecfaelkngcbnfdkcckmillnoki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [eoalfhodgifhbkgmbbdafcihjpdldpll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [nogdfjjfhknacchjpiccacoimeelkajb] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Users\Pat\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [144672 2009-08-28] (Apple Inc.)
R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [262696 2017-05-06] (AVG Technologies CZ, s.r.o.)
R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [5808784 2017-05-06] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [1189720 2017-04-27] (AVG Technologies CZ, s.r.o.)
S3 GameConsoleService; C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe [250616 2009-05-22] (WildTangent, Inc.)
R2 SBSDWSCService; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
S3 TMachInfo; C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [54136 2011-02-11] (TOSHIBA Corporation)
R3 TOSHIBA HDD SSD Alert Service; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [111960 2009-09-17] (TOSHIBA Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 avgbdisk; C:\windows\system32\drivers\avgbdiskx.sys [135384 2017-05-06] (AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\windows\system32\drivers\avgbidsdriverx.sys [257504 2017-05-06] (AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\windows\system32\drivers\avgbidshx.sys [150536 2017-05-06] (AVG Technologies CZ, s.r.o.)
R0 avgblog; C:\windows\system32\drivers\avgblogx.sys [269856 2017-05-06] (AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\windows\system32\drivers\avgbunivx.sys [43504 2017-05-06] (AVG Technologies CZ, s.r.o.)
S3 avgHwid; C:\windows\system32\drivers\avgHwid.sys [35128 2017-05-06] (AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\windows\system32\drivers\avgMonFlt.sys [109056 2017-05-06] (AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\windows\system32\drivers\avgRdr2.sys [91328 2017-05-06] (AVG Technologies CZ, s.r.o.)
S0 avgRvrt; C:\windows\system32\drivers\avgRvrt.sys [63136 2017-05-06] (AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\windows\system32\drivers\avgSnx.sys [765048 2017-05-06] (AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\windows\system32\drivers\avgSP.sys [473888 2017-05-06] (AVG Technologies CZ, s.r.o.)
R2 avgStm; C:\windows\system32\drivers\avgStm.sys [119784 2017-05-06] (AVG Technologies CZ, s.r.o.)
R0 avgVmm; C:\windows\system32\drivers\avgVmm.sys [280784 2017-05-06] (AVG Technologies CZ, s.r.o.)
S3 BVRPMPR5; C:\windows\system32\drivers\BVRPMPR5.SYS [49904 2009-08-19] (Avanquest Software) [File not signed]
R0 LPCFilter; C:\windows\System32\DRIVERS\LPCFilter.sys [36208 2009-07-02] (COMPAL ELECTRONIC INC.)
R3 RTL8187B; C:\windows\System32\DRIVERS\RTL8187B.sys [376320 2009-08-13] (Realtek Semiconductor Corporation                           )
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-05-06 14:29 - 2017-05-06 14:30 - 00020400 _____ C:\Users\Pat\Downloads\FRST.txt
2017-05-06 14:29 - 2017-05-06 14:29 - 00000000 ____D C:\FRST
2017-05-06 14:24 - 2017-05-06 14:25 - 01769984 _____ (Farbar) C:\Users\Pat\Downloads\FRST.exe
2017-05-06 12:59 - 2017-05-06 12:59 - 00765048 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgSnx.sys
2017-05-06 12:59 - 2017-05-06 12:59 - 00473888 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgsp.sys
2017-05-06 12:59 - 2017-05-06 12:59 - 00331240 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\avgBoot.exe
2017-05-06 12:59 - 2017-05-06 12:59 - 00280784 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgVmm.sys
2017-05-06 12:59 - 2017-05-06 12:59 - 00269856 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgblogx.sys
2017-05-06 12:59 - 2017-05-06 12:59 - 00257504 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbidsdriverx.sys
2017-05-06 12:59 - 2017-05-06 12:59 - 00150536 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbidshx.sys
2017-05-06 12:59 - 2017-05-06 12:59 - 00135384 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbdiskx.sys
2017-05-06 12:59 - 2017-05-06 12:59 - 00119784 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgStm.sys
2017-05-06 12:59 - 2017-05-06 12:59 - 00109056 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgmonflt.sys
2017-05-06 12:59 - 2017-05-06 12:59 - 00091328 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgRdr2.sys
2017-05-06 12:59 - 2017-05-06 12:59 - 00063136 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgRvrt.sys
2017-05-06 12:59 - 2017-05-06 12:59 - 00043504 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbunivx.sys
2017-05-06 12:59 - 2017-05-06 12:59 - 00035128 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgHwid.sys
2017-05-06 12:49 - 2017-05-06 12:49 - 00000978 _____ C:\Users\Public\Desktop\AVG.lnk
2017-05-06 12:49 - 2017-05-06 12:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2017-05-06 12:43 - 2017-05-06 12:51 - 00000000 ____D C:\Program Files\AVG
2017-05-06 12:34 - 2017-05-06 12:37 - 03449448 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Pat\Downloads\Antivirus_Free_1856.exe
2017-05-06 10:41 - 2017-05-06 12:19 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-04-24 14:20 - 2017-04-24 14:20 - 00654324 _____ C:\Users\Pat\Downloads\NJ-1040_2016.pdf
2017-04-14 10:31 - 2017-04-14 10:31 - 00208061 _____ C:\Users\Pat\Downloads\DOC021.pdf
2017-04-11 15:49 - 2017-03-27 13:28 - 00346320 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2017-04-11 15:49 - 2017-03-25 15:39 - 20284416 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2017-04-11 15:49 - 2017-03-25 15:07 - 04604416 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2017-04-11 15:49 - 2017-03-25 15:06 - 13654016 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2017-04-11 15:49 - 2017-03-25 14:55 - 02767360 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2017-04-11 15:49 - 2017-03-25 14:52 - 02289152 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2017-04-11 15:49 - 2017-03-25 14:51 - 01313280 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2017-04-11 15:49 - 2017-03-25 14:48 - 00499200 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2017-04-11 15:49 - 2017-03-25 14:47 - 02055680 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2017-04-11 15:49 - 2017-03-25 14:47 - 00710144 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2017-04-11 15:49 - 2017-03-25 14:47 - 00103936 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2017-04-11 15:49 - 2017-03-25 14:47 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2017-04-11 15:49 - 2017-03-25 14:47 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2017-04-11 15:49 - 2017-03-25 14:46 - 00693248 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2017-04-11 15:49 - 2017-03-25 14:46 - 00663552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2017-04-11 15:49 - 2017-03-25 14:46 - 00620032 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2017-04-11 15:49 - 2017-03-25 14:46 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2017-04-11 15:49 - 2017-03-25 14:46 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2017-04-11 15:49 - 2017-03-25 14:46 - 00130048 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2017-04-11 15:49 - 2017-03-25 14:46 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2017-04-11 15:49 - 2017-03-25 14:46 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2017-04-11 15:49 - 2017-03-25 14:45 - 00689664 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2017-04-11 15:49 - 2017-03-25 14:45 - 00416256 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2017-04-11 15:49 - 2017-03-25 14:45 - 00279040 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2017-04-11 15:49 - 2017-03-25 14:45 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2017-04-11 15:49 - 2017-03-25 14:45 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2017-04-11 15:49 - 2017-03-25 14:45 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2017-04-11 15:49 - 2017-03-25 14:45 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2017-04-11 15:49 - 2017-03-25 14:45 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2017-04-11 15:49 - 2017-03-25 14:44 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2017-04-11 15:49 - 2017-03-25 14:44 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2017-04-11 15:49 - 2017-03-25 13:19 - 00341504 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2017-04-11 15:49 - 2017-03-25 13:06 - 00476160 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2017-04-11 15:49 - 2017-03-25 12:57 - 00667648 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2017-04-11 15:49 - 2017-03-25 12:27 - 01155072 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2017-04-11 15:49 - 2017-03-24 18:41 - 00306688 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2017-04-11 15:49 - 2017-03-22 11:24 - 02953216 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2017-04-11 15:49 - 2017-03-22 11:24 - 00174080 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2017-04-11 15:49 - 2017-03-22 11:20 - 00073728 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2017-04-11 15:49 - 2017-03-22 11:06 - 02091520 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2017-04-11 15:49 - 2017-03-22 11:05 - 00573440 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2017-04-11 15:49 - 2017-03-22 11:05 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2017-04-11 15:49 - 2017-03-22 11:05 - 00093696 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2017-04-11 15:49 - 2017-03-22 11:05 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2017-04-11 15:49 - 2017-03-22 11:05 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2017-04-11 15:49 - 2017-03-22 11:05 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2017-04-11 15:49 - 2017-03-22 11:05 - 00011776 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2017-04-11 15:49 - 2017-03-14 11:23 - 00730344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2017-04-11 15:49 - 2017-03-14 11:23 - 00218856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgmms1.sys
2017-04-11 15:49 - 2017-03-14 11:17 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\cdd.dll
2017-04-11 15:49 - 2017-03-10 12:27 - 00308456 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2017-04-11 15:49 - 2017-03-10 12:19 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2017-04-11 15:49 - 2017-03-10 12:19 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2017-04-11 15:49 - 2017-03-10 12:19 - 00010240 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2017-04-11 15:49 - 2017-03-10 11:54 - 02400256 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2017-04-11 15:49 - 2017-03-10 11:53 - 00034304 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2017-04-11 15:49 - 2017-03-08 16:10 - 00805376 _____ (Microsoft Corporation) C:\windows\system32\cdosys.dll
2017-04-11 15:49 - 2017-03-08 00:26 - 04000488 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2017-04-11 15:49 - 2017-03-08 00:26 - 03945192 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2017-04-11 15:49 - 2017-03-08 00:26 - 00137960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2017-04-11 15:49 - 2017-03-08 00:26 - 00067304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2017-04-11 15:49 - 2017-03-08 00:24 - 01310528 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 01416192 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 01062912 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00872448 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00655360 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00553472 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00400896 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00294400 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00261120 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00254464 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00223232 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00172032 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00171008 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00141312 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2017-04-11 15:49 - 2017-03-08 00:22 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00644096 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00082432 _____ (Microsoft Corporation) C:\windows\system32\bcrypt.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-04-11 15:49 - 2017-03-08 00:21 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-04-11 15:49 - 2017-03-07 23:58 - 00097792 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2017-04-11 15:49 - 2017-03-07 23:58 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2017-04-11 15:49 - 2017-03-07 23:58 - 00029696 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2017-04-11 15:49 - 2017-03-07 23:58 - 00016896 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2017-04-11 15:49 - 2017-03-07 23:57 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2017-04-11 15:49 - 2017-03-07 23:56 - 00271360 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2017-04-11 15:49 - 2017-03-07 23:55 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2017-04-11 15:49 - 2017-03-07 23:54 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2017-04-11 15:49 - 2017-03-07 23:54 - 00124416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2017-04-11 15:49 - 2017-03-07 23:54 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2017-04-11 15:49 - 2017-03-07 23:53 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2017-04-11 15:49 - 2017-03-07 23:53 - 00036352 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2017-04-11 15:49 - 2017-03-07 23:53 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2017-04-11 15:49 - 2017-03-07 23:53 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2017-04-11 15:49 - 2017-03-07 23:53 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-04-11 15:49 - 2017-03-07 23:53 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-04-11 15:49 - 2017-03-07 23:53 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-04-11 15:49 - 2017-03-07 23:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-04-11 15:49 - 2017-03-07 12:17 - 00067584 _____ (Microsoft Corporation) C:\windows\system32\asycfilt.dll
2017-04-11 15:49 - 2017-03-03 21:14 - 01329664 _____ (Microsoft Corporation) C:\windows\system32\quartz.dll
2017-04-11 15:49 - 2017-03-03 21:14 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\mfmjpegdec.dll
2017-04-11 15:49 - 2017-02-14 12:19 - 00497664 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2017-04-11 15:49 - 2017-02-11 12:16 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2017-04-11 15:49 - 2017-02-09 12:14 - 00575488 _____ (Microsoft Corporation) C:\windows\system32\samsrv.dll
2017-04-11 15:49 - 2017-02-09 12:14 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\samlib.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00922432 _____ (Microsoft Corporation) C:\windows\system32\ucrtbase.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00066400 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00022368 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00019808 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00016224 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00015712 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00013664 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l2-1-0.dll
2017-04-11 15:49 - 2017-01-18 11:35 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-2-0.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-05-06 14:19 - 2016-11-16 10:26 - 00000000 ____D C:\Users\Pat\AppData\LocalLow\Mozilla
2017-05-06 13:49 - 2011-02-28 15:30 - 00000000 ____D C:\Users\Pat\AppData\Local\CrashDumps
2017-05-06 13:01 - 2016-11-13 14:02 - 00000000 ____D C:\Users\Pat\AppData\Roaming\AVG
2017-05-06 12:51 - 2016-08-08 11:09 - 00000000 ____D C:\ProgramData\Avg
2017-05-06 12:49 - 2015-10-30 14:15 - 00000000 ____D C:\Users\Pat\AppData\Local\AvgSetupLog
2017-05-06 12:29 - 2013-01-10 15:55 - 00000452 _____ C:\windows\Tasks\Arcadesafari.job
2017-05-06 12:29 - 2009-07-14 00:34 - 00019248 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-05-06 12:29 - 2009-07-14 00:34 - 00019248 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-05-06 12:20 - 2017-02-21 10:52 - 00000570 _____ C:\windows\Tasks\AVG-SSU_0217wt.job
2017-05-06 12:20 - 2017-02-21 10:52 - 00000432 _____ C:\windows\Tasks\AVG-SSU_0217wt_DELETE.job
2017-05-06 12:20 - 2016-08-03 17:37 - 00000570 _____ C:\windows\Tasks\AVG-SSU_0716wt.job
2017-05-06 12:20 - 2016-08-03 17:37 - 00000432 _____ C:\windows\Tasks\AVG-SSU_0716wt_DELETE.job
2017-05-06 12:20 - 2013-06-07 22:56 - 00000350 _____ C:\windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job
2017-05-06 12:20 - 2013-05-31 11:44 - 00000350 _____ C:\windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2017-05-06 12:20 - 2009-12-10 18:49 - 00000430 _____ C:\windows\system32\Drivers\etc\hosts.ics
2017-05-06 12:20 - 2009-07-14 00:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2017-05-06 12:19 - 2012-04-25 14:55 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-05-06 11:26 - 2009-09-03 04:23 - 00000000 ____D C:\Program Files\TOSHIBA Corporation
2017-05-06 11:26 - 2009-09-03 04:21 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2017-05-06 11:26 - 2009-09-03 04:21 - 00000000 ____D C:\Program Files\TOSHIBA
2017-05-04 19:21 - 2010-08-11 10:13 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2017-04-30 10:55 - 2009-07-14 00:53 - 00032544 _____ C:\windows\Tasks\SCHEDLGU.TXT
2017-04-19 16:33 - 2009-07-13 22:37 - 00000000 ____D C:\windows\rescache
2017-04-14 10:24 - 2009-09-03 04:26 - 00782470 _____ C:\windows\system32\PerfStringBackup.INI
2017-04-14 10:24 - 2009-07-13 22:37 - 00000000 ____D C:\windows\inf
2017-04-11 21:08 - 2015-11-27 10:22 - 00425672 _____ C:\windows\system32\FNTCACHE.DAT
2017-04-11 20:14 - 2012-03-29 10:14 - 00802904 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2017-04-11 20:14 - 2011-06-21 10:42 - 00144472 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2017-04-11 20:14 - 2009-09-03 04:32 - 00000000 ____D C:\windows\system32\Macromed
2017-04-11 17:51 - 2014-02-27 10:42 - 00000000 ____D C:\windows\system32\MRT
2017-04-11 17:50 - 2009-12-08 13:57 - 145733648 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2017-04-11 17:49 - 2010-06-06 03:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-04-11 17:48 - 2009-09-03 04:31 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-04-06 11:27 - 2010-07-05 21:02 - 00002372 _____ C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-04-06 11:27 - 2010-07-05 21:02 - 00002364 _____ C:\Users\Pat\Desktop\Google Chrome.lnk

==================== Files in the root of some directories =======

2013-06-26 17:35 - 2014-06-23 09:45 - 0003728 _____ () C:\Program Files\Mozilla Firefoxavg-secure-search.xml
2009-12-17 02:45 - 2013-03-14 13:02 - 0001262 _____ () C:\Users\Pat\AppData\Roaming\wklnhst.dat
2017-03-27 18:35 - 2017-03-27 18:35 - 0007610 _____ () C:\Users\Pat\AppData\Local\Resmon.ResmonCfg
2011-06-03 13:27 - 2011-06-03 13:27 - 0000000 _____ () C:\Users\Pat\AppData\Local\{1EA26696-D49B-4709-8AAF-730C3223150B}
2011-06-27 17:15 - 2011-06-27 17:15 - 0000000 _____ () C:\Users\Pat\AppData\Local\{48BF79C6-2C58-442E-9710-9891F1749037}
2011-06-03 13:30 - 2011-06-03 13:30 - 0000000 _____ () C:\Users\Pat\AppData\Local\{7961C536-E167-48D6-B8DC-289021E3CB0E}
2011-05-18 18:07 - 2011-07-11 09:58 - 0001940 _____ () C:\Users\Pat\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
2011-06-27 17:17 - 2011-06-27 17:17 - 0000000 _____ () C:\Users\Pat\AppData\Local\{B9191999-46EC-4CC6-9C07-C49AAC06DB24}
2011-07-11 09:38 - 2011-07-11 09:38 - 0000000 _____ () C:\Users\Pat\AppData\Local\{C8DDA32B-367F-4E83-A762-07BA791505E7}
2009-12-02 15:17 - 2009-12-02 15:44 - 0000317 _____ () C:\ProgramData\hpzinstall.log

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-05-05 11:19

==================== End of FRST.txt ============================