Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 04-09-2019
Ran by [removed] (administrator) on SHAVERHOME (Dell Inc. Inspiron 11 - 3147) (04-09-2019 09:46:11)
Running from C:\Users\[removed]\Desktop
[removed]
Platform: Windows 8.1 (Update) (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(Dell Inc. -> SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Dell Inc.) [File not signed] C:\Program Files (x86)\Dell\My Dell Client Framework\Dell.ClientFramework.exe
(FabulaTech -> ) C:\Program Files (x86)\VMware\ScannerRedirection\ftscanmgr.exe
(FabulaTech -> ) C:\Program Files\Common Files\VMware\DeviceRedirectionCommon\ftnlsv.exe
(FabulaTech -> VMware) C:\Program Files (x86)\Common Files\VMware\SerialPortRedirection\Client\vmwsprrdpwks.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files (x86)\McAfee\Common Framework\McTray.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files (x86)\McAfee\Common Framework\naPrdMgr.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files (x86)\McAfee\Common Framework\UdaterUI.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files (x86)\McAfee\VirusScan Enterprise\mfeann.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files (x86)\McAfee\VirusScan Enterprise\shstat.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files (x86)\McAfee\VirusScan Enterprise\vstskmgr.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Qualcomm Atheros -> ) [File not signed] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ActivateDesktop.exe
(Qualcomm Atheros -> Qualcomm®Atheros®) [File not signed] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [File not signed] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Horizon View Client\bin\vmware-view-usbd.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Horizon View Client\wsnm\wsnm.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [VMware Netlink 3 HV Install Utility] => C:\Program Files\Common Files\VMware\DeviceRedirectionCommon\ftnliu.exe [70080 2015-06-16] (FabulaTech -> )
HKLM-x32\...\Run: [McAfeeUpdaterUI] => C:\Program Files (x86)\McAfee\Common Framework\udaterui.exe [337440 2013-06-25] (McAfee, Inc. -> McAfee, Inc.)
HKLM-x32\...\Run: [ShStatEXE] => C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE [244080 2015-08-20] (McAfee, Inc. -> McAfee, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [1321984 2019-02-05] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [134784 2014-02-26] (Qualcomm Atheros -> Qualcomm®Atheros®) [File not signed]
HKU\S-1-5-21-1023352508-1266729709-51963614-1001\...\Run: [Speech Recognition] => C:\Windows\Speech\Common\sapisvr.exe [44032 2014-10-28] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.132\Installer\chrmstp.exe [2019-08-26] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\...\Authentication\Credential Providers: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\Windows\system32\AthCredentialProvider.dll [2014-02-26] (Qualcomm Atheros -> Qualcomm®Atheros®) [File not signed]
HKLM\Software\...\Authentication\Credential Provider Filters: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\Windows\system32\AthCredentialProvider.dll [2014-02-26] (Qualcomm Atheros -> Qualcomm®Atheros®) [File not signed]

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00FF248D-4CA2-449B-B54C-35D418AFF703} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [292952 2019-02-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {05868E8A-E8B1-4361-9907-2F8F4316F849} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [979024 2019-02-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {09F565C9-0DFC-46CE-A48F-95F73B1C61E8} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [1163352 2019-04-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {21043663-9D55-490C-B171-55C19AB98E38} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => Command(1): %windir%\system32\rundll32.exe -> aepdu.dll,AePduRunUpdate -nolegacy
Task: {21043663-9D55-490C-B171-55C19AB98E38} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => Command(2): %windir%\system32\rundll32.exe -> appraiser.dll,DoScheduledTelemetryRun
Task: {24649D75-686F-482E-AA27-A37FCFBB1DFB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2015-06-25] (Google Inc -> Google Inc.)
Task: {2EC7A0FB-9C58-4C92-B7A3-43D07F05881D} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1023352508-1266729709-51963614-1001UA => C:\Users\nickshaver06\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-08] (Dropbox, Inc -> Dropbox, Inc.)
Task: {4629EC2B-2B24-4FA7-A18E-493BAC9007B2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [292952 2019-02-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {5DA19172-4857-439E-95C2-45CFAE6CF62F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1067736 2015-10-28] () [File not signed]
Task: {5DAF7BF0-E87A-484A-9EAD-4813E92C3976} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2810608 2014-03-10] (Synaptics Incorporated -> Synaptics Incorporated)
Task: {A2F118FE-D74F-43A1-90B3-FF77C4D38A69} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2015-06-25] (Google Inc -> Google Inc.)
Task: {AD4875B7-A94A-450C-A038-B2D09E15FC47} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Command(1): %windir%\system32\rundll32.exe -> aepdu.dll,AePduRunUpdate
Task: {AD4875B7-A94A-450C-A038-B2D09E15FC47} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Command(2): %windir%\system32\rundll32.exe -> invagent.dll,RunUpdate
Task: {BE8574E2-C951-4C85-ADBC-B504239DA72F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [979024 2019-02-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {BFEAF30A-CC78-490C-A670-6549D1ACA1C5} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1023352508-1266729709-51963614-1001Core => C:\Users\nickshaver06\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-08] (Dropbox, Inc -> Dropbox, Inc.)
Task: {C3EF6070-C899-4FB3-A237-FBFDB17B89F6} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {D02D87FC-D1E5-4F6B-82C8-EB04E7585035} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387224 2014-06-30] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {D3EC277F-793D-4741-A600-43AE0FE268BF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1023352508-1266729709-51963614-1001UA => C:\Users\nickshaver06\AppData\Local\Google\Update\GoogleUpdate.exe [152216 2016-07-05] (Google Inc -> Google Inc.)
Task: {E198A809-E8C7-45AC-ADBF-802FC99B1C76} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1023352508-1266729709-51963614-1001Core => C:\Users\nickshaver06\AppData\Local\Google\Update\GoogleUpdate.exe [152216 2016-07-05] (Google Inc -> Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1023352508-1266729709-51963614-1001Core.job => C:\Users\nickshaver06\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1023352508-1266729709-51963614-1001UA.job => C:\Users\nickshaver06\AppData\Local\Dropbox\Update\DropboxUpdate.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.200.1
Tcpip\..\Interfaces\{B6C9BB14-55E2-405F-8B2A-D9B80E42738E}: [DhcpNameServer] 192.168.200.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1023352508-1266729709-51963614-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1023352508-1266729709-51963614-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2019-08-20] (Microsoft Corporation -> Microsoft Corporation)
BHO: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20150905085117.dll [2015-09-05] (McAfee, Inc. -> McAfee, Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2019-04-30] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2019-08-20] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-01-18] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20150905085119.dll [2015-09-05] (McAfee, Inc. -> McAfee, Inc.)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-10-25] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2019-04-30] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-01-18] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-10-25] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-10-25] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2017-07-18] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\nickshaver06\AppData\Roaming\Mozilla\Firefox\Profiles\6p6zh3u3.default-1479655099617 [2019-09-04]
FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2015-09-01] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF Extension: (McAfee ScriptScan for Firefox) - C:\Program Files (x86)\Common Files\McAfee\SystemCore [2015-09-14] [Legacy] [not signed]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-07-23] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google Inc -> Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-01-18] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-01-18] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-02-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-22] (VideoLAN) [File not signed]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-26] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-07-23] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin HKU\S-1-5-21-1023352508-1266729709-51963614-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\nickshaver06\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google Inc -> Google)
FF Plugin HKU\S-1-5-21-1023352508-1266729709-51963614-1001: @talk.google.com/O1DPlugin -> C:\Users\nickshaver06\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google Inc -> Google)
FF Plugin HKU\S-1-5-21-1023352508-1266729709-51963614-1001: @tools.google.com/Google Update;version=3 -> C:\Users\nickshaver06\AppData\Local\Google\Update\1.3.35.2\npGoogleUpdate3.dll [2019-08-15] (Google Inc -> Google LLC)
FF Plugin HKU\S-1-5-21-1023352508-1266729709-51963614-1001: @tools.google.com/Google Update;version=9 -> C:\Users\nickshaver06\AppData\Local\Google\Update\1.3.35.2\npGoogleUpdate3.dll [2019-08-15] (Google Inc -> Google LLC)
FF Plugin HKU\S-1-5-21-1023352508-1266729709-51963614-1001: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [No File]
FF Plugin ProgramFiles/Appdata: C:\Users\nickshaver06\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2016-07-05]
FF Plugin ProgramFiles/Appdata: C:\Users\nickshaver06\AppData\Roaming\mozilla\plugins\npo1d.dll [2016-07-05]

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxps://accounts.google.com/signin/v2/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&sacu=1&rip=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin
CHR StartupUrls: Default -> "hxxps://accounts.google.com/signin/v2/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&service=mail&sacu=1&rip=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin","hxxp://www.weather.com/weather/tenday/USOH0188","hxxp://www.google.com/"
CHR Profile: C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default [2019-09-04]
CHR Extension: (Google Drive) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-17]
CHR Extension: (Audiotool) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkgoccjhfjgjedhkiefaclppgbmoobnk [2015-08-16]
CHR Extension: (YouTube) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-29]
CHR Extension: (Google Search) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (hxxps://www.google.com/calendar/render?tab=mc) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfcnnjfpalolhpacllfghflhanpgmae [2015-02-05]
CHR Extension: (hxxps://www.google.com/voice#inbox) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\edppnbohmflmmlhmjibmdldokcbmlnif [2015-02-05]
CHR Extension: (Dictation for Gmail) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggdmhdpffgikgakkfojgiledkekfdce [2019-08-25]
CHR Extension: (hxxps://maps.google.com/) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\fechlkhcpcpaffdigchfolpfbpnbpcgi [2015-02-05]
CHR Extension: (AdBlock) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-08-29]
CHR Extension: (TwistedWave) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhjkhabkkillndljkhedpfldghbpljij [2015-08-16]
CHR Extension: (Loom - Video Recorder: Screen, Webcam and Mic) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\liecbddmkiiihnedobmlmillhodjkdmb [2019-09-01]
CHR Extension: (LipSurf - Voice Control for the Web) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\lnnmjmalakahagblkkcnjkoaihlfglon [2019-08-31]
CHR Extension: (Google Classroom) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhehppjhmmnlfbbopchdfldgimhfhfk [2015-03-25]
CHR Extension: (Chrome Web Store Payments) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
CHR Extension: (Gmail) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-29]
CHR Extension: (Chrome Media Router) - C:\Users\nickshaver06\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-08-07]
CHR HKLM-x32\...\Chrome\Extension: [gihfmmedoddijgnhkgfgnkeohkpbipol] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [319104 2014-02-26] (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3058256 2019-02-13] (Microsoft Corporation -> Microsoft Corporation)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [35976 2018-11-12] (Dell Inc -> )
R2 ftnlsv3hv; C:\Program Files\Common Files\VMware\DeviceRedirectionCommon\ftnlsv.exe [226240 2015-06-16] (FabulaTech -> )
R2 ftscanmgr; C:\Program Files (x86)\VMware\ScannerRedirection\ftscanmgr.exe [6363792 2015-07-31] (FabulaTech -> )
R2 McAfeeFramework; C:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe [130080 2013-06-25] (McAfee, Inc. -> McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [262544 2015-09-05] (McAfee, Inc. -> McAfee, Inc.)
R2 McTaskManager; C:\Program Files (x86)\McAfee\VirusScan Enterprise\vstskmgr.exe [215104 2015-10-29] (McAfee, Inc. -> McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [254792 2015-09-05] (McAfee, Inc. -> McAfee, Inc.)
R2 My Dell Client Framework; C:\Program Files (x86)\Dell\My Dell Client Framework\Dell.ClientFramework.exe [168960 2014-01-10] (Dell Inc.) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor Corp -> Realtek Semiconductor)
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe [1921768 2014-07-03] (Dell Inc. -> SoftThinks SAS)
R2 vmware-view-usbd; C:\Program Files (x86)\VMware\VMware Horizon View Client\bin\vmware-view-usbd.exe [1156824 2015-10-13] (VMware, Inc. -> VMware, Inc.)
R2 vmwsprrdpwks; C:\Program Files (x86)\Common Files\VMware\SerialPortRedirection\Client\vmwsprrdpwks.exe [261776 2015-05-08] (FabulaTech -> VMware)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-03] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-03] (Microsoft Corporation -> Microsoft Corporation)
R2 wsnm; C:\Program Files (x86)\VMware\VMware Horizon View Client\wsnm\wsnm.exe [533208 2015-10-14] (VMware, Inc. -> VMware, Inc.)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]
S3 WsDrvInst; "C:\Program Files (x86)\Wondershare\Video Converter Ultimate\Transfer\DriverInstall.exe" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3892224 2014-03-07] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros Communications, Inc.)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-12] (Broadcom Corporation -> Windows (R) Win 7 DDK provider)
S3 DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [32960 2017-06-20] (Techporch Incorporated -> Dell Inc.)
S3 DellProf; C:\Windows\system32\drivers\DellProf.sys [41208 2018-02-10] (Techporch Incorporated -> Dell Computer Corporation)
R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2013-01-24] (Microsoft Windows Hardware Compatibility Publisher -> OSR Open Systems Resources, Inc.)
R3 iaioi2c; C:\Windows\System32\drivers\iaioi2ce.sys [67584 2013-11-11] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [412440 2015-09-05] (McAfee, Inc. -> McAfee, Inc.)
R3 mfeaacsk; C:\Windows\System32\drivers\mfeaacsk.sys [64416 2015-09-05] (McAfee, Inc. -> McAfee, Inc.)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2015-04-02] (McAfee, Inc. -> McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [347800 2015-09-05] (McAfee, Inc. -> McAfee, Inc.)
U3 mfeavfk01; no ImagePath
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [80920 2015-09-05] (Microsoft Windows Early Launch Anti-malware Publisher -> McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [496888 2015-09-05] (McAfee, Inc. -> McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [875928 2015-09-05] (McAfee, Inc. -> McAfee, Inc.)
R3 mfeplk; C:\Windows\System32\drivers\mfeplk.sys [66080 2015-09-05] (McAfee, Inc. -> McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [114880 2015-09-05] (McAfee, Inc. -> McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344704 2015-09-05] (McAfee, Inc. -> McAfee, Inc.)
S3 RTLU3E8023-W8-64; C:\Windows\system32\DRIVERS\rtu30x64w8.sys [92376 2013-10-09] (Realtek Semiconductor Corp -> Realtek )
R3 SensorsServiceDriver; C:\Windows\System32\drivers\WUDFRd.sys [226304 2014-10-28] (Microsoft Windows -> Microsoft Corporation)
R0 stdcfltn; C:\Windows\System32\DRIVERS\stdcfltn.sys [22168 2012-07-13] (STMicroelectronics -> ST Microelectronics)
R3 ST_ACCEL; C:\Windows\system32\DRIVERS\ST_Accel.sys [83968 2013-11-21] (Microsoft Windows Hardware Compatibility Publisher -> STMicroelectronics)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-03-10] (Synaptics Incorporated -> Synaptics Incorporated)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-16] (Intel Corporation - Client Components Group -> Intel Corporation)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [73616 2019-02-05] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44024 2015-02-03] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [264000 2015-02-03] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-03] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-09-04 09:46 - 2019-09-04 09:47 - 000030132 _____ C:\Users\nickshaver06\Desktop\FRST.txt
2019-09-04 09:41 - 2019-09-04 09:41 - 000000000 ___RD C:\Users\nickshaver06\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2019-09-04 09:15 - 2019-09-04 09:36 - 000065829 _____ C:\Users\nickshaver06\Desktop\Fixlog.txt
2019-09-04 09:15 - 2019-09-04 09:24 - 000066286 _____ C:\Users\nickshaver06\Desktop\Fixlog1.txt
2019-09-04 09:14 - 2019-09-04 09:15 - 000003168 _____ C:\Users\nickshaver06\Desktop\bqhiliqbwskppjvxx.txt
2019-09-04 09:14 - 2019-09-04 09:14 - 000000002 _____ C:\Users\nickshaver06\Desktop\rnaknpcfuvwvsyxns.txt
2019-09-04 06:56 - 2019-09-04 06:56 - 000000000 ____D C:\Users\nickshaver06\Downloads\FRST-OlderVersion
2019-09-04 06:49 - 2019-09-04 06:53 - 000051721 _____ C:\Users\nickshaver06\Desktop\Addition.txt
2019-09-04 06:46 - 2019-09-04 06:46 - 001615360 _____ (Farbar) C:\Users\nickshaver06\Desktop\FRST64.exe
2019-09-03 21:01 - 2019-09-03 21:06 - 000051723 _____ C:\Users\nickshaver06\Downloads\Addition.txt
2019-09-03 20:46 - 2019-09-03 21:06 - 000045440 _____ C:\Users\nickshaver06\Downloads\FRST.txt
2019-09-03 20:45 - 2019-09-04 09:46 - 000000000 ____D C:\FRST
2019-09-03 20:26 - 2019-09-04 06:56 - 001615360 _____ (Farbar) C:\Users\nickshaver06\Downloads\FRST64.exe
2019-09-03 20:21 - 2019-09-03 20:21 - 000000967 _____ C:\Users\nickshaver06\Desktop\Balabolka.lnk
2019-09-03 20:21 - 2019-09-03 20:21 - 000000000 ____D C:\Users\nickshaver06\Documents\Balabolka
2019-09-03 20:21 - 2019-09-03 20:21 - 000000000 ____D C:\Users\nickshaver06\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Balabolka
2019-09-03 20:21 - 2019-09-03 20:21 - 000000000 ____D C:\Users\nickshaver06\AppData\Roaming\Balabolka
2019-09-03 20:21 - 2019-09-03 20:21 - 000000000 ____D C:\Program Files (x86)\Balabolka
2019-09-03 15:38 - 2019-09-03 20:18 - 017973561 _____ C:\Users\nickshaver06\Downloads\balabolka.zip
2019-09-01 19:50 - 2019-09-03 20:20 - 018158212 _____ (Ilya Morozov) C:\Users\nickshaver06\Documents\setup.exe
2019-09-01 19:22 - 2019-09-03 20:20 - 000002732 _____ C:\Users\nickshaver06\Documents\readme.rus.txt
2019-09-01 19:22 - 2019-09-03 20:20 - 000002603 _____ C:\Users\nickshaver06\Documents\readme.slk.txt
2019-09-01 19:22 - 2019-09-03 20:20 - 000002561 _____ C:\Users\nickshaver06\Documents\readme.cze.txt
2019-09-01 19:22 - 2019-09-03 20:20 - 000002541 _____ C:\Users\nickshaver06\Documents\readme.ita.txt
2019-09-01 19:22 - 2019-09-03 20:20 - 000002452 _____ C:\Users\nickshaver06\Documents\readme.eng.txt
2019-09-01 19:21 - 2019-09-03 20:20 - 000060123 _____ C:\Users\nickshaver06\Documents\history.rus.txt
2019-09-01 19:21 - 2019-09-03 20:20 - 000057225 _____ C:\Users\nickshaver06\Documents\history.eng.txt
2019-08-31 11:19 - 2019-08-31 11:19 - 000000439 _____ C:\Users\nickshaver06\Desktop\Fine-PARwithinandbeyondprison-1.txt
2019-08-29 11:01 - 2019-08-29 11:01 - 002999824 _____ (Awind) C:\Users\nickshaver06\Downloads\AirMedia-0e6ce0_.10.132.3.157.exe
2019-08-29 11:01 - 2019-08-29 11:01 - 000000000 ____D C:\Users\nickshaver06\AppData\Local\AirMedia
2019-08-27 09:59 - 2019-08-27 09:59 - 000078726 _____ C:\Users\nickshaver06\Downloads\Extras.Txt
2019-08-27 09:54 - 2019-08-27 09:54 - 000146372 _____ C:\Users\nickshaver06\Downloads\OTL.Txt
2019-08-27 09:14 - 2019-08-27 09:14 - 000602112 _____ (OldTimer Tools) C:\Users\nickshaver06\Downloads\OTL.exe
2019-08-27 09:12 - 2019-08-27 09:13 - 000157808 _____ C:\TDSSKiller.2.8.16.0_27.08.2019_09.12.16_log.txt
2019-08-27 09:12 - 2019-08-27 09:12 - 002237968 _____ (Kaspersky Lab ZAO) C:\Users\nickshaver06\Desktop\tdsskiller.exe
2019-08-27 09:05 - 2019-08-27 09:05 - 000468480 _____ () C:\Users\nickshaver06\Downloads\CKScanner.exe
2019-08-26 09:23 - 2019-08-26 09:23 - 000000000 ____D C:\Users\nickshaver06\Documents\YBC Big Files
2019-08-26 09:21 - 2019-09-04 09:41 - 000002186 _____ C:\Users\nickshaver06\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\McAfee VirusScan Scan Messages.lnk
2019-08-26 09:19 - 2019-08-26 09:19 - 000321832 _____ C:\Windows\Minidump\082619-36109-01.dmp
2019-08-26 09:17 - 2019-08-26 09:17 - 006705275 _____ C:\Users\nickshaver06\Desktop\_YBC_Materials_ForTeam.zip
2019-08-24 15:03 - 2019-08-24 15:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wordle
2019-08-24 15:03 - 2019-08-24 15:03 - 000000000 ____D C:\Program Files (x86)\wordle
2019-08-24 15:02 - 2019-08-24 15:02 - 008762368 _____ () C:\Users\nickshaver06\Downloads\wordle_windows_0_2.exe
2019-08-24 10:36 - 2019-08-24 10:36 - 000000000 _____ C:\Windows\invcol.tmp
2019-08-23 08:59 - 2019-08-23 08:59 - 000000000 ____D C:\Users\nickshaver06\.cisco
2019-08-23 08:57 - 2019-08-23 08:57 - 000000000 ____D C:\Users\nickshaver06\AppData\Local\Cisco
2019-08-23 08:57 - 2019-08-23 08:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco
2019-08-23 08:57 - 2019-08-23 08:57 - 000000000 ____D C:\ProgramData\Cisco
2019-08-23 08:57 - 2019-02-05 12:04 - 000263640 ____R (Cisco Systems, Inc.) C:\Windows\system32\Drivers\acsock64.sys
2019-08-23 08:56 - 2019-08-23 08:56 - 005734672 _____ (Cisco Systems, Inc.) C:\Users\nickshaver06\Downloads\anyconnect-win-4.6.04056-core-vpn-webdeploy-k9.exe
2019-08-22 23:26 - 2019-09-02 09:36 - 000000000 _____ C:\Users\nickshaver06\Documents\.Rhistory
2019-08-22 22:44 - 2019-08-22 22:46 - 000000000 ____D C:\ProgramData\Temp
2019-08-22 22:19 - 2019-08-22 22:19 - 000000000 ____D C:\Windows\{E9E39016-F1A4-4947-BF49-E0DACA61F95C}
2019-08-22 22:19 - 2019-08-22 22:19 - 000000000 ____D C:\Users\nickshaver06\AppData\Local\VMware
2019-08-22 22:19 - 2015-07-30 19:46 - 000057536 _____ (VMware, Inc.) C:\Windows\system32\Drivers\hcmon.sys
2019-08-22 22:08 - 2019-08-22 22:08 - 000000000 ____D C:\ProgramData\VMware
2019-08-22 22:07 - 2019-08-23 09:02 - 000000000 ____D C:\Users\nickshaver06\AppData\Roaming\VMware
2019-08-22 22:07 - 2019-08-22 22:07 - 000000000 ____D C:\Program Files\Common Files\VMware
2019-08-22 22:07 - 2019-08-22 22:07 - 000000000 ____D C:\Program Files (x86)\VMware
2019-08-22 22:05 - 2019-08-22 22:05 - 039458928 _____ (VMware, Inc.) C:\Users\nickshaver06\Downloads\VMware-Horizon-View-Client-x86_64-3.5.2-3150477.exe
2019-08-22 21:56 - 2019-09-02 09:36 - 000000000 ____D C:\Users\nickshaver06\AppData\Roaming\RStudio
2019-08-22 21:35 - 2019-08-22 21:35 - 000000000 ____D C:\Users\nickshaver06\Documents\R
2019-08-22 21:34 - 2019-09-02 09:36 - 000000000 ____D C:\Users\nickshaver06\AppData\Local\RStudio-Desktop
2019-08-22 21:32 - 2015-08-22 09:42 - 000901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2019-08-22 21:32 - 2015-08-22 09:42 - 000066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:42 - 000022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:42 - 000019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:42 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:42 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:42 - 000016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:42 - 000015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:42 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:42 - 000013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:42 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:42 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:42 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:42 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:42 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:42 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2019-08-22 21:32 - 2015-08-22 09:35 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2019-08-22 21:28 - 2019-08-22 21:28 - 015080792 _____ (Microsoft Corporation) C:\Users\nickshaver06\Downloads\vc_redist.x64.exe
2019-08-22 21:24 - 2019-08-22 21:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RStudio
2019-08-22 21:22 - 2019-08-22 21:24 - 000000000 ____D C:\Program Files\RStudio
2019-08-22 21:20 - 2019-08-22 21:22 - 133103936 _____ (RStudio, Inc.) C:\Users\nickshaver06\Downloads\RStudio-1.2.1335.exe
2019-08-22 21:20 - 2019-08-22 21:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R
2019-08-22 21:16 - 2019-08-22 21:16 - 000000000 ____D C:\Program Files\R
2019-08-22 21:14 - 2019-08-22 21:15 - 084681344 _____ (R Core Team ) C:\Users\nickshaver06\Downloads\R-3.6.1-win.exe
2019-08-19 11:11 - 2019-08-19 15:10 - 000000060 _____ C:\Users\nickshaver06\Desktop\Base Camp Time Sheet.txt
2019-08-14 14:49 - 2019-08-14 14:49 - 000000000 ____D C:\Users\nickshaver06\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2019-08-07 11:20 - 2019-08-19 09:34 - 000000189 _____ C:\Users\nickshaver06\Desktop\TimeSheet - Tylers Work Macros.txt
2019-08-07 11:19 - 2019-09-02 11:20 - 000000798 _____ C:\Users\nickshaver06\Desktop\Time sheet - Almanac Programming.txt
2019-08-05 11:00 - 2019-08-05 11:00 - 000000276 _____ C:\Users\nickshaver06\Desktop\Jordan - Next Steps.txt

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-09-04 09:45 - 2015-02-05 18:27 - 000003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1023352508-1266729709-51963614-1001
2019-09-04 09:43 - 2014-12-27 11:49 - 000000000 ____D C:\Program Files (x86)\Dell Backup and Recovery
2019-09-04 09:42 - 2013-08-22 11:36 - 000000000 ____D C:\Windows\Registration
2019-09-04 09:41 - 2015-08-07 15:20 - 000000000 ___DO C:\Users\nickshaver06\OneDrive
2019-09-04 09:39 - 2013-08-22 10:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-09-04 09:39 - 2013-08-22 09:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2019-09-04 09:36 - 2015-02-05 18:22 - 000000000 ____D C:\Users\nickshaver06
2019-09-04 09:28 - 2015-02-16 17:30 - 000000000 ____D C:\Users\nickshaver06\AppData\LocalLow\Temp
2019-09-04 06:51 - 2015-06-16 10:58 - 000000968 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1023352508-1266729709-51963614-1001UA.job
2019-09-03 21:05 - 2018-07-29 15:04 - 000000000 ____D C:\Users\nickshaver06\Desktop\Torch Prep Big Files
2019-09-03 21:01 - 2015-02-05 18:22 - 000000000 ____D C:\Users\nickshaver06\AppData\Local\Packages
2019-09-03 20:20 - 2019-06-22 21:35 - 000004693 _____ C:\Users\nickshaver06\Documents\license.rus.txt
2019-09-03 20:20 - 2019-05-29 20:42 - 000005432 _____ C:\Users\nickshaver06\Documents\license.slk.txt
2019-09-03 20:20 - 2018-08-23 10:52 - 000005305 _____ C:\Users\nickshaver06\Documents\license.cze.txt
2019-09-03 20:20 - 2018-03-24 02:58 - 000005707 _____ C:\Users\nickshaver06\Documents\license.ita.txt
2019-09-03 20:20 - 2018-03-24 02:57 - 000004967 _____ C:\Users\nickshaver06\Documents\license.eng.txt
2019-09-03 15:21 - 2013-08-22 11:36 - 000000000 ____D C:\Windows\system32\NDF
2019-09-03 15:11 - 2014-03-18 05:53 - 000005388 _____ C:\Windows\system32\PerfStringBackup.INI
2019-09-03 08:51 - 2015-06-16 10:58 - 000000916 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1023352508-1266729709-51963614-1001Core.job
2019-09-03 08:50 - 2019-01-20 14:04 - 000000166 _____ C:\Users\nickshaver06\Desktop\Invite to Next Potluck.txt
2019-09-03 08:47 - 2017-08-01 20:06 - 000000934 _____ C:\Users\nickshaver06\Desktop\BECKS LIST to Buy.txt
2019-09-02 19:49 - 2019-06-18 14:45 - 000000607 _____ C:\Users\nickshaver06\Desktop\Timesheet - Content Alignment TimeSheet.txt
2019-09-02 09:36 - 2015-02-05 18:45 - 000000000 ___RD C:\Users\nickshaver06\Dropbox
2019-09-02 09:31 - 2015-02-16 12:53 - 000000000 ____D C:\Users\nickshaver06\AppData\Local\CrashDumps
2019-08-31 14:55 - 2013-08-22 09:25 - 000262144 ___SH C:\Windows\system32\config\ELAM
2019-08-28 21:05 - 2013-08-22 09:36 - 000000000 ____D C:\Windows\Inf
2019-08-26 14:52 - 2015-06-25 12:36 - 000002246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-08-26 09:19 - 2015-06-10 09:24 - 376176329 _____ C:\Windows\MEMORY.DMP
2019-08-26 09:19 - 2015-06-10 09:24 - 000000000 ____D C:\Windows\Minidump
2019-08-24 10:37 - 2014-12-27 10:19 - 000000000 ____D C:\DELL
2019-08-23 09:02 - 2013-08-22 11:36 - 000000000 ____D C:\Windows\system32\FxsTmp
2019-08-23 08:57 - 2014-12-27 11:43 - 000000000 ____D C:\Program Files (x86)\Cisco
2019-08-22 22:45 - 2014-12-27 11:56 - 000000000 ____D C:\Program Files (x86)\Dell
2019-08-22 22:45 - 2014-12-27 11:47 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2019-08-22 22:45 - 2014-12-27 10:40 - 000000000 ____D C:\ProgramData\DELL
2019-08-22 21:49 - 2017-02-12 13:34 - 000000000 ____D C:\Users\nickshaver06\Documents\Old Dropbox Teaching Files
2019-08-22 21:33 - 2013-08-22 11:20 - 000000000 ____D C:\Windows\CbsTemp
2019-08-22 21:31 - 2014-12-27 11:34 - 000000000 ____D C:\ProgramData\Package Cache
2019-08-22 08:46 - 2015-06-16 10:58 - 000003928 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1023352508-1266729709-51963614-1001UA
2019-08-22 08:46 - 2015-06-16 10:58 - 000003548 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1023352508-1266729709-51963614-1001Core
2019-08-20 10:18 - 2013-08-22 11:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-08-20 10:16 - 2015-02-07 10:02 - 000000000 ____D C:\Program Files\Microsoft Office 15
2019-08-19 10:24 - 2018-06-22 14:37 - 000000000 ___RD C:\Users\nickshaver06\Documents\Scanned Documents
2019-08-15 20:11 - 2016-07-05 16:37 - 000003518 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1023352508-1266729709-51963614-1001UA
2019-08-15 20:11 - 2016-07-05 16:37 - 000003246 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1023352508-1266729709-51963614-1001Core
2019-08-14 14:50 - 2015-02-05 18:38 - 000000000 ____D C:\Users\nickshaver06\AppData\Roaming\Dropbox

==================== FLock ================

2014-12-27 12:59 C:\System Recovery

==================== SigCheck ===============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2019-08-29 14:04
==================== End of FRST.txt ============================