Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-03-2020
Ran by [removed] (administrator) on BEDROOM (BIOSTAR Group A55ML2) (25-03-2020 22:29:42)
Running from C:\Users\[removed]\Downloads
[removed]
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\aswEngSrv.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\aswidsagent.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGUI.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGUI.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Users\Bob\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Users\Bob\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Users\Bob\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dropbox, Inc -> The Qt Company Ltd.) C:\Users\Bob\AppData\Roaming\Dropbox\bin\93.4.273\QtWebEngineProcess.exe
(Dropbox, Inc -> The Qt Company Ltd.) C:\Users\Bob\AppData\Roaming\Dropbox\bin\93.4.273\QtWebEngineProcess.exe
(Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe
(Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Hewlett-Packard) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\consent.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(pCloud AG -> pCloud AG) C:\Program Files (x86)\pCloud Drive\pCloud.exe
(Piriform Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(SUPERAntiSpyware.com -> SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Support.com Inc -> SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(WDC) [File not signed] C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
(Western Digital Technologies, Inc.) [File not signed] C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [325704 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard) [File not signed]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1124058857-270521184-1186177606-1000\...\Run: [pCloud] => C:\Program Files (x86)\pCloud Drive\pCloud.exe [3591824 2020-03-10] (pCloud AG -> pCloud AG)
HKU\S-1-5-21-1124058857-270521184-1186177606-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [18630056 2018-09-10] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-21-1124058857-270521184-1186177606-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [9230256 2020-03-23] (Support.com Inc -> SUPERAntiSpyware)
HKU\S-1-5-21-1124058857-270521184-1186177606-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [48214720 2020-02-27] (Google LLC -> )
HKU\S-1-5-21-1124058857-270521184-1186177606-1000\...\MountPoints2: E - E:\Setup.exe
HKU\S-1-5-21-1124058857-270521184-1186177606-1000\...\MountPoints2: G - G:\Setup.exe
HKU\S-1-5-21-1124058857-270521184-1186177606-1000\...\MountPoints2: {f41d9b2c-ef07-11e8-b22e-b8975a555610} - E:\Setup.exe
HKU\S-1-5-21-1124058857-270521184-1186177606-1000\...\MountPoints2: {fc1716c7-7b9f-11e8-bf92-b8975a555610} - I:\Setup.exe
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.149\Installer\chrmstp.exe [2020-03-18] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] -> 
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2019-05-03] (Adobe Inc. -> Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WD Quick View.lnk [2020-03-03]
ShortcutTarget: WD Quick View.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (Western Digital Technologies, Inc.) [File not signed]
Startup: C:\Users\Bob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2020-03-20]
ShortcutTarget: Dropbox.lnk -> C:\Users\Bob\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {05D3A9C0-3541-4518-BDE3-2988A5BC3F29} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Bob\Downloads\esetonlinescanner_enu (1).exe
Task: {08B2B16E-351B-4E05-A780-382D091F2D82} - System32\Tasks\{FF2E432D-67AA-4BE4-8A3B-FAAD5DED1FB4} => C:\Windows\system32\pcalua.exe -a E:\Setup.exe -d E:\
Task: {14734CE0-D2C1-40B9-88C0-04FF6A6BEC01} - System32\Tasks\Antivirus Emergency Update => C:\Program Files\AVG\Antivirus\AvEmUpdate.exe [3942704 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
Task: {25F7E391-3B64-48CB-BB49-DF977D5C772E} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [1692296 2020-02-27] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {4B72F68C-A8DD-4C40-8120-017A3B7A09B6} - System32\Tasks\{7422A4C2-209D-49F4-814E-1B9DD5C89D86} => C:\Program Files\Repetier-Host\RepetierHost.exe [6355968 2019-06-03] (Hot-World GmbH & Co. KG) [File not signed]
Task: {4C11282F-0D64-424C-B2F0-A50D6FF7081F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)
Task: {5EB210AA-1074-46F2-94F8-193265AFF213} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1124058857-270521184-1186177606-1000Core => C:\Users\Bob\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-06] (Dropbox, Inc -> Dropbox, Inc.)
Task: {686AE7B9-3D79-4FD6-9A01-93C49ED0E0EB} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_207_Plugin.exe [1457208 2019-06-12] (Adobe Inc. -> Adobe)
Task: {78D2740A-B370-4932-AB07-198BF1206BE5} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Bob\Downloads\esetonlinescanner_enu (1).exe
Task: {828DA1C9-3364-43E0-A657-4E5E00FE5EB0} - System32\Tasks\SSBkgdUpdate => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe
Task: {8DF9900C-61CF-4702-9ABC-15D1DF6BB84A} - System32\Tasks\{1C1AD762-0338-415D-A3BE-268298A6C8DF} => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
Task: {8F941EA7-1863-49DC-A724-ABCDB9569960} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
Task: {8FDEB867-897B-4A7B-AC28-1D1D82674809} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1124058857-270521184-1186177606-1000UA => C:\Users\Bob\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-06] (Dropbox, Inc -> Dropbox, Inc.)
Task: {9C0858A8-9440-4A01-A810-4E631FE7A41F} - System32\Tasks\{5D7C141E-0C90-4646-AA4F-7C400CDB3E00} => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
Task: {B2EFE467-F4FF-4E5A-A4D5-FA103B55CEBE} - System32\Tasks\NCH Software\VideoPadCacheDeleteAll => C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe [7155768 2020-02-11] (NCH Software, Inc. -> NCH Software)
Task: {B830614D-3957-4E6C-B6DE-0AB5A0506022} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-09-07] (Google Inc -> Google Inc.)
Task: {BB875EE1-CCF9-477F-824E-E39C3B0D02D2} - System32\Tasks\Open URL by RoboForm => C:\Windows\system32\rundll32.exe url.dll,FileProtocolHandler "hxxps://www.roboform.com/uninstall.html?aaa=KICMPMNMOJJMMMGMNJJJCNIMNJOMMMCNLMNMKJJMCNOJOJKMLJCNNMLJLMHMOJOJKJJMMJLJKJMJJNJICMHMCNMMCNIMFMOMOMCNPMCNGMJMPMPMFMJMCNOMCNIMJMPMOMCNNMJNPICMPMFMFMNMJNHICMEKMICNJJCKJNBJCMNLAJNJJNKJCMJNNICMJNDJCMKJBJJNMJCMPMFMPMFMPMJNFICMNIJJIIG (the data entry has 20 more characters).
Task: {BB90801F-1352-451C-89A3-131B4FEE300E} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-05] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {C6D96063-495F-438F-BA53-D59175AAFA15} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [13797712 2018-09-10] (Piriform Ltd -> Piriform Ltd)
Task: {C70E86CC-4B8E-445D-8CA9-02EA133D61EC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-02-28] (Adobe Inc. -> Adobe)
Task: {C9AC4025-133B-4780-98A0-48988FC22B14} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-09-07] (Google Inc -> Google Inc.)
Task: {E5881363-4BF1-4B89-B5CC-A784DD9C9215} - System32\Tasks\{8B2A0D4C-552F-43FC-9A85-F248A098CE33} => C:\Windows\system32\pcalua.exe -a C:\Users\Bob\Downloads\oxy-gen_full_map_sd.exe -d C:\Users\Bob\Downloads
Task: {F73D4C97-9C4A-4D82-875A-B83475D10141} - System32\Tasks\{1B706B02-E3B5-4B85-9B33-EA1A7B380291} => C:\Program Files\Repetier-Host\RepetierHost.exe [6355968 2019-06-03] (Hot-World GmbH & Co. KG) [File not signed]
Task: {FA2C2CE4-2F65-4DE7-A636-967D059D12D4} - System32\Tasks\{B185657F-16E0-4C48-8FFA-47B177E4F3E3} => C:\Program Files\Repetier-Host\RepetierHost.exe [6355968 2019-06-03] (Hot-World GmbH & Co. KG) [File not signed]
Task: {FC44FCF0-35D6-433D-906A-9142D5BF864C} - System32\Tasks\Java Platform SE Auto Updater => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1124058857-270521184-1186177606-1000Core.job => C:\Users\Bob\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1124058857-270521184-1186177606-1000UA.job => C:\Users\Bob\AppData\Local\Dropbox\Update\DropboxUpdate.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-30] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{D3C43E92-7256-47D8-BB2F-3340D77A294D}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{E291A5D1-1558-44AC-B6FB-394EFDC2A3C4}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-1124058857-270521184-1186177606-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.msn.com/?OCID=IE11FREDHP&PC=UF01
URLSearchHook: HKU\S-1-5-21-1124058857-270521184-1186177606-1000 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc. -> Yahoo! Inc.)
BHO: No Name -> {9A64BE6F-E726-4A23-AF9A-B7A5B982042E}' -> No File
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc -> Google Inc.)
BHO: No Name -> {EB4E9106-71D2-4C18-8C2A-9715354C2EA7}' -> No File
BHO-x32: &Yahoo! Toolbar Helper -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28] (Yahoo! Inc. -> Yahoo! Inc.)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Company -> Hewlett-Packard Co.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\ssv.dll [2019-03-12] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: No Name -> {9A64BE6F-E726-4A23-AF9A-B7A5B982042E}' -> No File
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-24] (Google Inc -> Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-03-12] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: No Name -> {EB4E9106-71D2-4C18-8C2A-9715354C2EA7}' -> No File
BHO-x32: SingleInstance Class -> {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll [2008-07-28] (Yahoo! Inc. -> Yahoo! Inc)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Company -> Hewlett-Packard Co.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc -> Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-24] (Google Inc -> Google Inc.)
Toolbar: HKLM-x32 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28] (Yahoo! Inc. -> Yahoo! Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF DefaultProfile: tp3n9fpg.default-1483494016929-1509446903528
FF ProfilePath: C:\Users\Bob\AppData\Roaming\Mozilla\Firefox\Profiles\tp3n9fpg.default-1483494016929-1509446903528 [2020-03-25]
FF Homepage: Mozilla\Firefox\Profiles\tp3n9fpg.default-1483494016929-1509446903528 -> hxxps://www.malwareremoval.com/forum/viewtopic.php?f=29&t=65275&start=15
FF Session Restore: Mozilla\Firefox\Profiles\tp3n9fpg.default-1483494016929-1509446903528 -> is enabled.
FF Notifications: Mozilla\Firefox\Profiles\tp3n9fpg.default-1483494016929-1509446903528 -> hxxps://discuss.inventables.com
FF HKLM-x32\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2019-10-14] [Legacy] [not signed]
FF HKU\S-1-5-21-1124058857-270521184-1186177606-1000\...\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_207.dll [2019-06-12] (Adobe Inc. -> )
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_207.dll [2019-06-12] (Adobe Inc. -> )
FF Plugin-x32: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-03-12] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-03-12] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-03-05] (Adobe Inc. -> Adobe Systems Inc.)

Chrome: 
=======
CHR Profile: C:\Users\Bob\AppData\Local\Google\Chrome\User Data\Default [2020-03-25]
CHR Notifications: Default -> hxxps://ocsnext.ebay.co.uk
CHR StartupUrls: Default -> "hxxps://mail.google.com/mail/u/0/#inbox","hxxps://mesg.ebay.co.uk/mesgweb/ViewMessages/0/m2m?filter=3&src=replied","hxxps://mail.google.com/mail/u/1/#inbox","hxxps://ohmify.com/courses/learn-electronics-2/experiment-sound-generator/introduction/","hxxps://ohmify.com/library/","hxxp://track1.gtxcorp.com/gtxtrack/Track","hxxps://discordapp.com/login?redirect_to=%2Fchannels%2F229744023680581632%2F229744023680581632","hxxps://my.pcloud.com/?utm_source=email&utm_medium=template&utm_content=ImageOnly&utm_campaign=VerifyEmail#page=filemanager&folder=0","hxxps://jlcpcb.com/","hxxps://xercise4less.virtuagym.com/classes/day/2020-02-05?event_type=1099&activity_id=&coach=","hxxps://www.instructables.com/id/Wii-Nunchuck-Full-Functionality/","hxxps://esphome.io/components/display/ssd1306.html","hxxps://www.adafruit.com/product/326","hxxps://www.ti.com/lit/ds/symlink/lm555.pdf","hxxps://pay.ebay.co.uk/rxo?action=success&sessionid=1247130803014","hxxps://cube3x3.com/how-to-solve-a-rubiks-cube/last-step/","hxxps://forum.arduino.cc/index.php?topic=271827.0","hxxps://tree.findmypast.co.uk/#/trees/696752b0-4ba6-42a3-8794-23e2a8d5d594/1409382414/pedigree","hxxps://tree.findmypast.co.uk/#/trees/696752b0-4ba6-42a3-8794-23e2a8d5d594/1409382499/pedigree"
CHR Extension: (Slides) - C:\Users\Bob\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Docs) - C:\Users\Bob\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\Bob\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-21]
CHR Extension: (YouTube) - C:\Users\Bob\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-08]
CHR Extension: (Google Search) - C:\Users\Bob\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-08]
CHR Extension: (LED Byte Generator) - C:\Users\Bob\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecbmkegibbgngcjkcihanekjkmlhdoom [2017-06-16]
CHR Extension: (Adobe Acrobat) - C:\Users\Bob\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-03-04]
CHR Extension: (Sheets) - C:\Users\Bob\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Google Docs Offline) - C:\Users\Bob\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-03-12]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Bob\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2018-10-11]
CHR Extension: (Lightshot (screenshot tool)) - C:\Users\Bob\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbniclmhobmnbdlbpiphghaielnnpgdp [2020-01-28]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Bob\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]
CHR Extension: (Gmail) - C:\Users\Bob\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-30]
CHR Extension: (Chrome Media Router) - C:\Users\Bob\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-03-21]
CHR Profile: C:\Users\Bob\AppData\Local\Google\Chrome\User Data\System Profile [2020-02-01]
CHR HKU\S-1-5-21-1124058857-270521184-1186177606-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2017-01-30] (SUPERAntiSpyware.com -> SUPERAntiSpyware.com)
S4 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [241152 2013-03-29] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-28] (Advanced Micro Devices, Inc.) [File not signed]
R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [413544 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [6094272 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6933272 2020-03-22] (Malwarebytes Inc -> Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed]
R2 WDDMService; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [311296 2011-08-01] (WDC) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
S2 MsMpSvc; "c:\Program Files\Microsoft Security Client\MsMpEng.exe" [X]
S3 NisSrv; "c:\Program Files\Microsoft Security Client\NisSrv.exe" [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 amdkmdag; C:\Windows\System32\DRIVERS\atikmdag.sys [11658752 2013-03-29] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
S3 amdkmdap; C:\Windows\System32\DRIVERS\atikmpag.sys [581120 2013-03-29] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
S3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [96768 2013-02-14] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R0 avgArDisk; C:\Windows\System32\drivers\avgArDisk.sys [37928 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgArPot; C:\Windows\System32\drivers\avgArPot.sys [206160 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\Windows\System32\drivers\avgbidsdriver.sys [271704 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\Windows\System32\drivers\avgbidsh.sys [207192 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\Windows\System32\drivers\avgbuniv.sys [64344 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgKbd; C:\Windows\System32\drivers\avgKbd.sys [43560 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\Windows\System32\drivers\avgMonFlt.sys [175472 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\Windows\System32\drivers\avgRdr2.sys [111144 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\Windows\System32\drivers\avgRvrt.sys [84096 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\Windows\System32\drivers\avgSnx.sys [849256 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\Windows\System32\drivers\avgSP.sys [459192 2020-03-11] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 avgStm; C:\Windows\System32\drivers\avgStm.sys [235280 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgVmm; C:\Windows\System32\drivers\avgVmm.sys [316840 2020-03-03] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc)
R1 cbfs6; C:\Windows\system32\drivers\cbfs6.sys [460992 2016-09-09] (EldoS Corporation -> /n software, Inc.)
R1 cbfsconnect2017; C:\Windows\system32\drivers\cbfsconnect2017.sys [478984 2019-10-07] (Callback Technologies, Inc. -> Callback Technologies, Inc.)
S3 CH341SER_A64; C:\Windows\System32\Drivers\CH341S64.SYS [58368 2009-06-02] (Microsoft Windows Hardware Compatibility Publisher -> www.winchiphead.com)
S3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [94704 2014-01-27] (Future Technology Devices International Ltd -> FTDI Ltd.)
S3 FTSER2K; C:\Windows\System32\drivers\ftser2k.sys [79872 2014-10-21] (Microsoft Windows Hardware Compatibility Publisher -> FTDI Ltd.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [214496 2020-03-25] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248968 2020-03-25] (Malwarebytes Inc -> Malwarebytes)
R3 netr28ux; C:\Windows\System32\DRIVERS\netr28ux.sys [2269592 2017-12-24] (MEDIATEK INC. -> MediaTek Inc.)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 Ser2pl; C:\Windows\System32\DRIVERS\ser2pl64.sys [248776 2018-11-28] (WDKTestCert charles-yeh,131345514351795974 -> Prolific Technology Inc.)
R3 vpnpbus; C:\Windows\System32\DRIVERS\vpnpbus.sys [19208 2019-10-07] (Callback Technologies, Inc. -> Callback Technologies, Inc.)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [159936 2016-08-16] (NGO -> MBB)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-25 22:27 - 2020-03-25 22:27 - 002279936 _____ (Farbar) C:\Users\Bob\Downloads\FRST64 (1).exe
2020-03-25 22:14 - 2020-03-25 22:14 - 001957784 _____ (Malwarebytes) C:\Users\Bob\Downloads\MBSetup (2).exe
2020-03-25 21:53 - 2020-03-25 21:53 - 000000000 ____D C:\Users\Default\AppData\Local\Google
2020-03-25 21:53 - 2020-03-25 21:53 - 000000000 ____D C:\Users\Default User\AppData\Local\Google
2020-03-25 21:44 - 2020-03-25 21:44 - 000214496 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2020-03-25 21:40 - 2020-03-25 21:40 - 000248968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2020-03-24 00:11 - 2020-03-24 00:11 - 000048378 _____ C:\Users\Bob\Documents\_autosave-noname.kicad_pcb
2020-03-22 23:03 - 2020-03-22 23:03 - 000153312 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2020-03-22 23:03 - 2020-03-22 23:03 - 000001948 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-03-22 23:03 - 2020-03-22 23:03 - 000001948 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2020-03-22 23:03 - 2020-03-22 23:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2020-03-22 23:00 - 2020-03-22 23:00 - 001957784 _____ (Malwarebytes) C:\Users\Bob\Downloads\MBSetup (1).exe
2020-03-22 18:01 - 2020-03-22 18:01 - 000000850 _____ C:\Users\Public\Desktop\KiCad.lnk
2020-03-22 18:01 - 2020-03-22 18:01 - 000000850 _____ C:\ProgramData\Desktop\KiCad.lnk
2020-03-22 18:01 - 2020-03-22 18:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KiCad
2020-03-22 17:46 - 2020-03-25 21:59 - 000000000 ____D C:\Program Files\KiCad
2020-03-22 17:05 - 2020-03-22 17:35 - 1213128816 _____ (KiCad) C:\Users\Bob\Downloads\kicad-5.1.5_2-x86_64.exe
2020-03-22 00:23 - 2019-12-04 15:02 - 000000688 _____ C:\Users\Bob\Documents\noname.pro
2020-03-21 23:26 - 2020-03-21 23:26 - 000019197 _____ C:\Users\Bob\Downloads\comparator_2020-03-21.zip
2020-03-21 19:27 - 2020-03-21 19:55 - 000056720 _____ C:\Users\Bob\Documents\noname.kicad_pcb
2020-03-21 19:27 - 2020-03-21 19:27 - 000052087 _____ C:\Users\Bob\Documents\noname.kicad_pcb-bak
2020-03-21 17:22 - 2020-03-21 17:21 - 000053616 _____ () C:\Windows\system32\Drivers\staport.sys
2020-03-20 20:58 - 2020-03-20 20:58 - 000000000 ____D C:\Users\Bob\AppData\Local\pCloud_AG
2020-03-20 19:41 - 2020-03-20 19:41 - 000000000 ____D C:\Users\Bob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2020-03-20 19:30 - 2020-03-20 19:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pCloud
2020-03-20 19:30 - 2020-03-20 19:30 - 000000000 ____D C:\Program Files (x86)\pCloud Drive
2020-03-18 21:24 - 2020-03-18 21:24 - 000434007 _____ C:\Users\Bob\Downloads\download.svg
2020-03-18 20:02 - 2019-10-07 10:28 - 000270088 _____ (Callback Technologies, Inc.) C:\Windows\system32\cbfsconnectNetRdr2017.dll
2020-03-18 20:02 - 2019-10-07 10:27 - 000189192 _____ (Callback Technologies, Inc.) C:\Windows\system32\cbfsconnectMntNtf2017.dll
2020-03-18 20:01 - 2019-10-07 10:19 - 000478984 _____ (Callback Technologies, Inc.) C:\Windows\system32\Drivers\cbfsconnect2017.sys
2020-03-18 20:00 - 2019-10-07 10:20 - 000019208 _____ (Callback Technologies, Inc.) C:\Windows\system32\Drivers\vpnpbus.sys
2020-03-18 01:07 - 2020-03-18 01:07 - 000416640 _____ C:\Users\Bob\Downloads\Computer_Concepts_ROM_Fitting_Instructions_pdf.zip
2020-03-18 01:03 - 2020-03-18 01:03 - 011376521 _____ C:\Users\Bob\Downloads\BASIC_ROM_User_Guide_pdf.zip
2020-03-17 23:58 - 2020-03-17 23:58 - 003319771 _____ (Mike Wyatt ) C:\Users\Bob\Downloads\BeebEm414 (1).exe
2020-03-17 23:57 - 2020-03-17 23:57 - 000000979 _____ C:\Users\Public\Desktop\BeebEm.lnk
2020-03-17 23:57 - 2020-03-17 23:57 - 000000979 _____ C:\ProgramData\Desktop\BeebEm.lnk
2020-03-17 23:57 - 2020-03-17 23:57 - 000000000 ____D C:\Users\Bob\Documents\BeebEm
2020-03-17 23:57 - 2020-03-17 23:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BeebEm
2020-03-17 23:57 - 2020-03-17 23:57 - 000000000 ____D C:\Program Files (x86)\BeebEm
2020-03-17 23:56 - 2020-03-17 23:56 - 003319771 _____ (Mike Wyatt ) C:\Users\Bob\Downloads\BeebEm414.exe
2020-03-16 22:12 - 2020-03-16 22:12 - 000000000 ____D C:\Users\Bob\Documents\testing
2020-03-13 22:00 - 2020-03-14 00:30 - 000000003 _____ C:\Users\Bob\Downloads\fp-info-cache
2020-03-13 21:45 - 2020-03-13 21:45 - 000059648 _____ C:\Users\Bob\Downloads\comparator3.kicad_pcb
2020-03-13 21:45 - 2019-12-04 15:02 - 000000688 _____ C:\Users\Bob\Downloads\comparator3.pro
2020-03-05 17:12 - 2020-03-05 17:13 - 006485733 _____ C:\Users\Bob\Downloads\slac-pub-9332b.ps.gz
2020-03-03 14:37 - 2020-03-03 14:37 - 000000000 ____D C:\Users\Bob\AppData\Roaming\Acronis
2020-03-03 14:37 - 2020-03-03 14:37 - 000000000 ____D C:\ProgramData\Apple
2020-03-03 14:37 - 2020-03-03 14:37 - 000000000 ____D C:\Program Files\Bonjour
2020-03-03 14:37 - 2020-03-03 14:37 - 000000000 ____D C:\Program Files (x86)\Bonjour
2020-03-03 14:03 - 2020-03-03 14:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WD SmartWare
2020-03-03 14:03 - 2020-03-03 14:03 - 000000000 ____D C:\Program Files\Western Digital
2020-03-03 14:02 - 2020-03-03 14:02 - 000000000 ____D C:\Users\Bob\AppData\Local\Western Digital
2020-03-03 11:29 - 2020-03-03 11:28 - 000368088 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\avgBoot.exe
2020-03-03 11:29 - 2020-03-03 11:28 - 000235280 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgStm.sys
2020-03-03 11:29 - 2020-03-03 11:28 - 000175472 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgMonFlt.sys
2020-03-02 13:41 - 2020-03-02 13:41 - 000000000 ____D C:\Users\Bob\AppData\Local\assistant
2020-03-01 00:06 - 2020-03-01 00:06 - 000101616 _____ C:\Users\Bob\Documents\Reference_in_suppport__alan_.pdf
2020-03-01 00:01 - 2020-03-01 00:01 - 000030659 _____ C:\Users\Bob\Documents\Reference in suppport (alan).pdf
2020-02-29 23:37 - 2020-02-29 23:37 - 000010059 _____ C:\Users\Bob\Downloads\ellip.FCStd
2020-02-29 23:32 - 2020-02-29 23:32 - 000020742 _____ C:\Users\Bob\Downloads\ExtrudeEllipse.FCStd
2020-02-28 19:29 - 2020-02-28 22:41 - 000000000 ____D C:\ProgramData\SCARM
2020-02-28 19:29 - 2020-02-28 19:29 - 000000963 _____ C:\Users\Public\Desktop\SCARM.lnk
2020-02-28 19:29 - 2020-02-28 19:29 - 000000963 _____ C:\ProgramData\Desktop\SCARM.lnk
2020-02-28 19:29 - 2020-02-28 19:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SCARM
2020-02-28 19:28 - 2020-02-28 19:29 - 000000000 ____D C:\Program Files (x86)\SCARM
2020-02-28 00:02 - 2020-03-13 21:03 - 000024064 _____ C:\Users\Bob\Documents\ohmify 555 timer calculations.xls
2020-02-24 14:17 - 2020-02-24 14:17 - 000001122 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debut Video Capture Software.lnk
2020-02-24 14:17 - 2020-02-24 14:17 - 000001110 _____ C:\Users\Public\Desktop\Debut Video Capture Software.lnk
2020-02-24 14:17 - 2020-02-24 14:17 - 000001110 _____ C:\ProgramData\Desktop\Debut Video Capture Software.lnk
2020-02-24 14:17 - 2020-02-24 14:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs
2020-02-24 14:17 - 2020-02-24 14:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
2020-02-24 14:16 - 2020-02-24 14:16 - 002515024 _____ (NCH Software) C:\Users\Bob\Downloads\debutsetup.exe
2020-02-24 14:13 - 2020-02-24 14:13 - 002862136 _____ (NCH Software) C:\Users\Bob\Downloads\vpsetup.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-25 22:31 - 2019-06-05 00:23 - 000033574 _____ C:\Users\Bob\Downloads\FRST.txt
2020-03-25 22:30 - 2019-06-05 00:22 - 000000000 ____D C:\FRST
2020-03-25 22:01 - 2009-07-14 03:20 - 000000000 ____D C:\Windows\tracing
2020-03-25 21:57 - 2020-01-31 23:42 - 000000000 ___RD C:\Users\Bob\Google Drive
2020-03-25 21:55 - 2020-01-31 23:39 - 000002000 _____ C:\Users\Public\Desktop\Google Slides.lnk
2020-03-25 21:55 - 2020-01-31 23:39 - 000002000 _____ C:\ProgramData\Desktop\Google Slides.lnk
2020-03-25 21:55 - 2020-01-31 23:39 - 000001998 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2020-03-25 21:55 - 2020-01-31 23:39 - 000001998 _____ C:\ProgramData\Desktop\Google Sheets.lnk
2020-03-25 21:55 - 2020-01-31 23:39 - 000001988 _____ C:\Users\Public\Desktop\Google Docs.lnk
2020-03-25 21:55 - 2020-01-31 23:39 - 000001988 _____ C:\ProgramData\Desktop\Google Docs.lnk
2020-03-25 21:55 - 2020-01-31 23:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2020-03-25 21:54 - 2009-07-14 04:45 - 000022768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-03-25 21:54 - 2009-07-14 04:45 - 000022768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2020-03-25 21:51 - 2020-02-06 23:47 - 000000000 ____D C:\Users\Bob\AppData\Roaming\kicad
2020-03-25 21:45 - 2019-06-23 21:22 - 000004162 _____ C:\Windows\system32\Tasks\Antivirus Emergency Update
2020-03-25 21:40 - 2009-07-14 05:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-03-25 09:27 - 2017-05-23 20:08 - 000000000 ____D C:\Program Files\SUPERAntiSpyware
2020-03-24 00:13 - 2018-06-22 21:10 - 000000000 ____D C:\Users\Bob\Documents\Marj's medical state
2020-03-23 12:01 - 2015-12-26 16:42 - 000000000 ____D C:\Windows\system32\Tasks\NCH Software
2020-03-22 17:39 - 2020-02-02 17:39 - 000000000 ____D C:\Users\Bob\Documents\Kicad progs
2020-03-22 16:49 - 2018-12-14 22:22 - 000003168 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1124058857-270521184-1186177606-1000
2020-03-22 16:49 - 2017-06-22 12:34 - 000002149 _____ C:\Users\Bob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2020-03-22 16:49 - 2017-06-22 12:34 - 000000000 ___RD C:\Users\Bob\OneDrive
2020-03-22 01:39 - 2009-07-14 05:13 - 000786318 _____ C:\Windows\system32\PerfStringBackup.INI
2020-03-22 01:39 - 2009-07-14 03:20 - 000000000 ____D C:\Windows\inf
2020-03-20 20:58 - 2019-04-01 14:28 - 000000000 ____D C:\Users\Bob\AppData\Local\pCloud
2020-03-20 19:42 - 2014-12-11 22:10 - 000000000 ____D C:\Users\Bob\AppData\Roaming\Dropbox
2020-03-20 19:41 - 2014-09-03 20:24 - 000003334 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-03-20 19:41 - 2014-09-03 20:24 - 000003206 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-03-20 19:31 - 2017-11-19 20:22 - 000000000 ____D C:\ProgramData\Package Cache
2020-03-20 19:30 - 2019-04-01 14:27 - 000002483 _____ C:\Users\Public\Desktop\pCloud Drive.lnk
2020-03-20 19:30 - 2019-04-01 14:27 - 000002483 _____ C:\ProgramData\Desktop\pCloud Drive.lnk
2020-03-18 20:06 - 2015-12-08 22:56 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-03-18 20:05 - 2015-12-04 09:59 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-03-18 20:05 - 2014-12-25 19:16 - 000004476 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2020-03-15 22:06 - 2016-03-21 21:20 - 000000000 ____D C:\Users\Bob\Documents\eagle
2020-03-15 20:45 - 2014-12-21 15:22 - 000007609 _____ C:\Users\Bob\AppData\Local\resmon.resmoncfg
2020-03-13 12:38 - 2015-11-29 17:02 - 000000000 ____D C:\Users\Bob\AppData\Local\Arduino15
2020-03-11 19:16 - 2019-06-23 21:22 - 000459192 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSP.sys
2020-03-11 00:23 - 2014-03-29 21:40 - 000000000 ____D C:\Windows\system32\MRT
2020-03-11 00:15 - 2014-03-29 21:40 - 121542864 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2020-03-09 00:28 - 2019-12-01 22:02 - 000003132 _____ C:\Windows\system32\Tasks\{8B2A0D4C-552F-43FC-9A85-F248A098CE33}
2020-03-09 00:28 - 2019-06-20 20:15 - 000003714 _____ C:\Windows\system32\Tasks\EOSv3 Scheduler onLogOn
2020-03-09 00:28 - 2019-06-20 20:15 - 000003274 _____ C:\Windows\system32\Tasks\EOSv3 Scheduler onTime
2020-03-09 00:28 - 2018-09-03 21:07 - 000000000 ____D C:\Windows\system32\Tasks\AVAST Software
2020-03-09 00:28 - 2018-03-15 01:11 - 000004128 _____ C:\Windows\system32\Tasks\CCleaner Update
2020-03-09 00:28 - 2016-02-28 20:38 - 000002784 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2020-03-09 00:28 - 2015-09-07 17:36 - 000003856 _____ C:\Windows\system32\Tasks\SSBkgdUpdate
2020-03-09 00:28 - 2015-09-07 17:36 - 000003704 _____ C:\Windows\system32\Tasks\Java Platform SE Auto Updater
2020-03-09 00:28 - 2014-10-21 10:31 - 000004312 _____ C:\Windows\system32\Tasks\Adobe Flash Player Updater
2020-03-05 01:08 - 2014-08-15 11:19 - 000000000 ____D C:\Users\Bob\Documents\Arduino
2020-03-03 23:48 - 2017-11-19 20:23 - 000000000 ____D C:\Users\Bob\AppData\Roaming\Eagle
2020-03-03 11:28 - 2019-06-23 21:22 - 000849256 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSnx.sys
2020-03-03 11:28 - 2019-06-23 21:22 - 000316840 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgVmm.sys
2020-03-03 11:28 - 2019-06-23 21:22 - 000271704 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsdriver.sys
2020-03-03 11:28 - 2019-06-23 21:22 - 000207192 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsh.sys
2020-03-03 11:28 - 2019-06-23 21:22 - 000206160 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgArPot.sys
2020-03-03 11:28 - 2019-06-23 21:22 - 000111144 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRdr2.sys
2020-03-03 11:28 - 2019-06-23 21:22 - 000084096 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRvrt.sys
2020-03-03 11:28 - 2019-06-23 21:22 - 000064344 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbuniv.sys
2020-03-03 11:28 - 2019-06-23 21:22 - 000043560 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgKbd.sys
2020-03-03 11:28 - 2019-06-23 21:22 - 000037928 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgArDisk.sys
2020-02-28 16:03 - 2014-03-31 16:16 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-02-28 16:03 - 2014-03-31 16:16 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-02-28 16:03 - 2014-02-27 19:56 - 000000000 ____D C:\Users\Bob\AppData\Local\Adobe
2020-02-28 15:57 - 2017-01-04 01:18 - 000000000 ____D C:\Users\Bob\AppData\LocalLow\Mozilla
2020-02-24 15:30 - 2014-12-11 22:15 - 000000000 ___RD C:\Users\Bob\Dropbox
2020-02-24 14:17 - 2017-12-23 21:29 - 000000000 ____D C:\ProgramData\NCH Software
2020-02-24 14:17 - 2015-12-26 16:42 - 000000000 ____D C:\Users\Bob\AppData\Roaming\NCH Software
2020-02-24 14:17 - 2015-12-26 16:42 - 000000000 ____D C:\Program Files (x86)\NCH Software
2020-02-24 14:14 - 2017-12-23 21:29 - 000001286 _____ C:\Users\Public\Desktop\NCH Suite.lnk
2020-02-24 14:14 - 2017-12-23 21:29 - 000001286 _____ C:\ProgramData\Desktop\NCH Suite.lnk
2020-02-24 14:14 - 2017-12-23 21:29 - 000001146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoPad Video Editor.lnk
2020-02-24 14:14 - 2017-12-23 21:29 - 000001134 _____ C:\Users\Public\Desktop\VideoPad Video Editor.lnk
2020-02-24 14:14 - 2017-12-23 21:29 - 000001134 _____ C:\ProgramData\Desktop\VideoPad Video Editor.lnk

==================== Files in the root of some directories ========

2018-03-13 21:12 - 2018-03-13 21:12 - 007371128 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Bob\avg_antivirus_free_setup_a2c.exe
2018-03-15 01:07 - 2018-03-15 01:08 - 015333512 _____ (Piriform Ltd) C:\Users\Bob\ccsetup541.exe
2018-01-07 19:19 - 2018-01-07 19:22 - 084217304 _____ (GitHub, Inc.) C:\Users\Bob\GitHubDesktopSetup.exe
2018-03-06 00:22 - 2018-03-13 20:53 - 015065792 _____ (Microsoft Corporation) C:\Users\Bob\MSEInstall.exe
2018-06-29 00:40 - 2018-06-29 00:40 - 000003389 _____ () C:\Users\Bob\AppData\Roaming\gmshrc
2016-10-26 21:28 - 2017-05-26 16:03 - 000004149 _____ () C:\Users\Bob\AppData\Roaming\LTspiceIV.ini
2016-10-25 20:33 - 2016-10-25 23:06 - 000003565 _____ () C:\Users\Bob\AppData\Roaming\LTspiceXVII.ini
2015-12-26 23:31 - 2015-12-26 23:31 - 000128816 _____ () C:\Users\Bob\AppData\Roaming\WavePad.dmp
2014-04-02 21:13 - 2020-01-16 22:43 - 000039936 _____ () C:\Users\Bob\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2020-02-12 23:53 - 2020-02-12 23:53 - 000000756 _____ () C:\Users\Bob\AppData\Local\recently-used.xbel
2014-12-21 15:22 - 2020-03-15 20:45 - 000007609 _____ () C:\Users\Bob\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2020-03-08 19:50
==================== End of FRST.txt ========================