Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

FaceBook reward wheel, spin the lucky wheel will not go away

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

FaceBook reward wheel, spin the lucky wheel will not go away

Unread postby huskyrog » December 26th, 2015, 3:01 pm

Addition.txt
FRST.txt
You do not have the required permissions to view the files attached to this post.
huskyrog
Active Member
 
Posts: 7
Joined: December 26th, 2015, 2:29 pm
Advertisement
Register to Remove

Re: FaceBook reward wheel, spin the lucky wheel will not go

Unread postby capnkrunch » December 28th, 2015, 2:07 am

Warning!
The steps presented in these posts are for this person and machine ONLY. Do not apply these steps to your own system, without the guidance of a trained malware removal helper. Doing so, may possibly damage your system, preventing it from starting.

Hello huskyrog and welcome to the Malware Removal Forums :)

My name is capnkrunch and I will be helping you with your malware problems. I'm an Undergraduate trainee here, and as such my posts to you have to first be checked by a Teacher, because of this my replies to your posts may be slightly delayed. Please be patient and I'm sure we'll be able to resolve your problems.

Before we begin, please read and follow these important guidelines, so things will proceed smoothly.
  • The instructions being given are for YOUR computer and system only!
    Using these instructions on a different computer can cause damage to that computer and possibly render it inoperable!
  • You must have Administrator rights, permissions for this computer.
  • DO NOT run any other fix or removal tools unless instructed to do so.
  • DO NOT install any other software (or hardware) during the cleaning process.
  • Only post your problem at (1) one help site. Applying fixes from multiple help sites can cause problems.
  • Print each set of instructions, if possible. Your Internet connection will not be available during some fix processes.
  • Only reply to this thread, do not start another ... Please, continue responding, until I give you the "All Clean".
    Remember, absence of symptoms does mean the infection is all gone.
  • Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
  • Failure to respond for 3 days, will result in your topic being closed.

Note: If you haven't done so already, please read this topic ALL USERS OF THIS FORUM MUST READ THIS FIRST where the conditions for receiving help here are explained.

Please be aware that removing Malware is a potentially hazardous undertaking. I will take care, not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.


For your safety and protection, I would advise backing up all your important documents, personal data files and photos to a CD or DVD drive as some infections may render your computer unbootable during or before the disinfection process. The safest practice is not to backup any files with the following file extensions:
exe, .scr, .ini, .htm, .html, .php, .asp, .xml, .zip, .rar, .cab as they may be infected.

User avatar
capnkrunch
MRU Master
MRU Master
 
Posts: 793
Joined: March 20th, 2015, 6:41 pm
Location: Chicago

Re: FaceBook reward wheel, spin the lucky wheel will not go

Unread postby huskyrog » December 28th, 2015, 11:06 am

Great. thanks for replying
huskyrog
Active Member
 
Posts: 7
Joined: December 26th, 2015, 2:29 pm

Re: FaceBook reward wheel, spin the lucky wheel will not go

Unread postby capnkrunch » December 28th, 2015, 5:18 pm

Hello huskyrog :)

First we need to make a registry backup that we can restore to should the need arise.

Step one...

Create a Backup With Tweaking.com Registry Backup (TCRB)
There is also a tutorial with pictures available HERE.
  • Download TCRB from HERE and save it to your Desktop.
  • Double-click on tweaking.com_registry_backup_setup.exe and follow the prompts to install TCRB.
  • Launch TCRB.
  • Click the Backup Registry tab and make sure all the boxes are checked.
  • Click on Backup Now.
  • Once the backup is finished you can now exit the program.

Step two...

Reenable Items With MSConfig
  • Press the Windows Key + R.
  • Type msconfig.exe into the text box and click OK.
  • Check Normal startup and click OK.
  • You will be prompted to restart your computer. Click Restart.

Step three...

Uninstall Programs
  • Press the Windows Key + R.
  • Enter appwiz.cpl into the text box and click OK.
  • Locate the following programs:
    Adobe Reader 9.5.5
    Coupon Printer for Windows
  • Press the Uninstall or Uninstall/Change button and carefully follow any prompts to uninstall the program.
    • Take care to read through any prompts completely! Some uninstallers may attempt to trick you into keeping the program.
    • Do this for every program listed.
    • Don't worry if you can't find one of the programs. Just be sure to let me know in your reply.
  • Once finished reboot your computer.

Step four...

Show Hidden Files and Folders
  • Click Start and then click File Explorer.
  • Click on the View tab and then click Options.
  • In the Folder Options window click on the View tab.
  • Check Show hidden files and folders and uncheck Hide extensions for known file types.
  • Click OK.

Step five...

Upload Files to VirusTotal
  • Please go to VirusTotal.
  • Click the Choose File button.
  • Navigate to the following files
    C:\Users\Owner\AppData\Roaming\mcs.rma
  • Click the Scan it! button.
  • You might see a message saying File already analysed, if you do click Reanalyse.
  • Wait for all the scans to finish then copy and paste the web address from your broswer's address bar.
    Example of web address :
    Image
  • Include the link in your next reply.

Step six...

AdwCleaner
  • Please download AdwCleaner by Xplode save it to your Desktop.
  • Close all open programs and windows so that you are at your Desktop.
  • Right click on adwcleaner.exe and click Run as administrator.
  • Click on the Scan button.
  • When the scan finishes, click the Cleaning button.
  • When it finishes, click OK then OK again. AdwCleaner will reboot your computer.
  • When your computer reboots a log AdwCleaner[C1].txt will open. Copy and paste the contents of that logfile in your reply.

Step seven...

Junkware Removal Tool (JRT)
  • Please download Junkware Removal Tool (JRT) by Malwarebytes and save it to your Desktop.
  • Close all open programs and windows so that you are at your Desktop.
  • Right click on JRT.exe and select Run as administrator.
  • When the tool loads press any key to start the scan.
  • When JRT finishes it will open a log in Notepad, JRT.txt. Copy and paste the contents in your reply.

Step eight...

Fresh FRST Scan
  • You should still have FRST64.exe in your Downloads folder. If not please download it HERE.
  • Close all open programs and windows.
  • Right-click FRST64.exe and select Run as administrator.
  • Under Optional Scan check Addition.txt.
  • Press Scan button and wait while the scan finishes.
  • Once finished, two logs will open on your Desktop: FRST.txt and Addition.txt. Please copy and paste the contents of both logs in your reply.

Please post each log separately to prevent it being cut off by the forum post size limiter.
Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections...

In your next reply please include:
  • Did you have any problems with the instructions?
  • VirusTotal link
  • AdwCleaner[C1].txt
  • JRT.txt
  • FRST.txt
  • Addition.txt
  • Are there any changes in computer behavior?
User avatar
capnkrunch
MRU Master
MRU Master
 
Posts: 793
Joined: March 20th, 2015, 6:41 pm
Location: Chicago

Re: FaceBook reward wheel, spin the lucky wheel will not go

Unread postby huskyrog » December 29th, 2015, 12:12 am

https://www.virustotal.com/en/file/77ef ... 451359769/

# AdwCleaner v5.026 - Logfile created 28/12/2015 at 22:38:26
# Updated 21/12/2015 by Xplode
# Database : 2015-12-23.1 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Owner - OWNER-PC
# Running from : C:\Users\Owner\Downloads\adwcleaner_5.026 (1).exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\ProgramData\FileCure
[-] Folder Deleted : C:\ProgramData\Partner
[-] Folder Deleted : C:\Users\Owner\AppData\Local\Ilivid Player
[-] Folder Deleted : C:\Users\Owner\AppData\LocalLow\ShopAtHome
[-] Folder Deleted : C:\Users\Owner\AppData\Roaming\ShopAtHome

***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
[-] Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ShopAtHomeWatcher]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ShopAtHomeUpdater]
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{40A61B9E-B111-46EE-A1F2-C1100192BA48}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{884189CF-7C10-41E8-A014-F7B2BE40AADB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{76481128-CCDC-4073-8F65-B06F23B138FC}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{66516A07-F617-488A-90CF-4E690CFB3C5F}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{311B58DC-A4DC-4B04-B1B5-60299AD3D803}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{682E055E-0863-4334-918C-29CD4F3F4D96}
[-] Key Deleted : HKCU\Software\ParetoLogic
[-] Key Deleted : HKCU\Software\YahooPartnerToolbar
[-] Key Deleted : HKLM\SOFTWARE\ParetoLogic
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B8ADED90-E829-405D-B79F-A059670E81E1}
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs]

***** [ Web browsers ] *****

[-] [C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : blekko
[-] [C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : aol.com
[-] [C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [3152 bytes] ##########
huskyrog
Active Member
 
Posts: 7
Joined: December 26th, 2015, 2:29 pm

Re: FaceBook reward wheel, spin the lucky wheel will not go

Unread postby huskyrog » December 29th, 2015, 12:17 am

oaded Profiles: Owner (Available Profiles: Owner & DefaultAppPool)
Platform: Windows 10 Home Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (All) =========================

(Microsoft Corporation) C:\Windows\System32\smss.exe
(Microsoft Corporation) C:\Windows\System32\csrss.exe
(Microsoft Corporation) C:\Windows\System32\wininit.exe
(Microsoft Corporation) C:\Windows\System32\csrss.exe
(Microsoft Corporation) C:\Windows\System32\services.exe
(Microsoft Corporation) C:\Windows\System32\lsass.exe
(Microsoft Corporation) C:\Windows\System32\winlogon.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(Microsoft Corporation) C:\Windows\System32\dwm.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\spoolsv.exe
(Microsoft Corporation) C:\Windows\System32\WUDFHost.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Acer Incorporated) C:\Program Files (x86)\Gateway\Registration\GregHSRW.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(Acer) C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.EXE
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\LVPrS64H.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\System32\sihost.exe
(Microsoft Corporation) C:\Windows\explorer.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\taskhostw.exe
(Microsoft Corporation) C:\Windows\System32\SearchIndexer.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(Microsoft Corporation) C:\Windows\System32\svchost.exe
(Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
(Microsoft Corporation) C:\Windows\System32\RuntimeBroker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\OFFICE11\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Microsoft Corporation) C:\Windows\System32\fontdrvhost.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.EXE
(Microsoft Corporation) C:\Windows\System32\ApplicationFrameHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\SearchProtocolHost.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(Farbar) C:\Users\Owner\Downloads\FRST64.exe
(Microsoft Corporation) C:\Windows\System32\notepad.exe

==================== Registry (All) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-17] (AVAST Software)
HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2368736 2014-06-03] (Microsoft Corp.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-16] (Apple Inc.)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe, [30720 2015-10-30] (Microsoft Corporation)
HKLM-x32\...\Winlogon: [Userinit] C:\Windows\sysWOW64\userinit.exe [26112 2015-10-30] (Microsoft Corporation)
HKLM\...\Winlogon: [Shell] explorer.exe [4502864 2015-10-30] (Microsoft Corporation)
HKLM-x32\...\Winlogon: [Shell] explorer.exe [4064320 2015-10-30] (Microsoft Corporation)
HKLM\...\Policies\Explorer: [ForceActiveDesktopOn] 0
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKLM\...\Policies\Explorer: [NoRecentDocsHistory] 0
HKLM\...\Policies\Explorer: [NoDrives] 0
HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-10-30] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-10-30] (Microsoft Corporation)
HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403304 2015-10-29] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\...\Run: [OneDrive] => C:\Users\Owner\AppData\Local\Microsoft\OneDrive\OneDrive.exe [551112 2015-12-16] (Microsoft Corporation)
HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [60688 2015-11-30] (Apple Inc.)
HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\...\Policies\Explorer: [NoDrives] 0
Lsa: [Authentication Packages] msv1_0
Lsa: [Notification Packages] scecli
SecurityProviders: credssp.dll
SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No File
SSODL-x32: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Owner\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64\FileSyncShell64.dll [2015-12-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\Owner\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64\FileSyncShell64.dll [2015-12-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\Owner\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64\FileSyncShell64.dll [2015-12-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Owner\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64\FileSyncShell64.dll [2015-12-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Owner\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64\FileSyncShell64.dll [2015-12-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-12-17] (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Owner\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Owner\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Owner\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Owner\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [EnhancedStorageShell] -> {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D} => C:\Windows\System32\EhStorShell.dll [2015-10-30] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Owner\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\FileSyncShell.dll [2015-12-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\Owner\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\FileSyncShell.dll [2015-12-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\Owner\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\FileSyncShell.dll [2015-12-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Owner\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\FileSyncShell.dll [2015-12-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Owner\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\FileSyncShell.dll [2015-12-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Owner\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Owner\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Owner\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-10] (Dropbox, Inc.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy Software Installer.lnk [2009-11-05]
ShortcutTarget: Best Buy Software Installer.lnk -> C:\Program Files\Best Buy Software Installer\Best Buy Software Installer.exe (Best Buy®)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy Software Installer.lnk [2009-11-05]
ShortcutTarget: Best Buy Software Installer.lnk -> C:\Program Files\Best Buy Software Installer\Best Buy Software Installer.exe (Best Buy®)
Startup: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy Software Installer.lnk [2009-11-05]
ShortcutTarget: Best Buy Software Installer.lnk -> C:\Program Files\Best Buy Software Installer\Best Buy Software Installer.exe (Best Buy®)
BootExecute: autocheck autochk *
AlternateShell: cmd.exe

==================== Internet (All) ===========================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: [S-1-5-21-3901721066-3880018567-3824620293-1000] => 24.241.122.94:80
Winsock: Catalog5 01 C:\WINDOWS\SysWOW64\NLAapi.dll [65024 2015-10-30] (Microsoft Corporation)
Winsock: Catalog5 02 C:\WINDOWS\SysWOW64\napinsp.dll [55808 2015-10-30] (Microsoft Corporation)
Winsock: Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656 2015-10-30] (Microsoft Corporation)
Winsock: Catalog5 04 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656 2015-10-30] (Microsoft Corporation)
Winsock: Catalog5 05 C:\WINDOWS\SysWOW64\mswsock.dll [312160 2015-10-30] (Microsoft Corporation)
Winsock: Catalog5 06 C:\WINDOWS\SysWOW64\winrnr.dll [23552 2015-10-30] (Microsoft Corporation)
Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)
Winsock: Catalog9 01 C:\WINDOWS\SysWOW64\mswsock.dll [312160 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9 02 C:\WINDOWS\SysWOW64\mswsock.dll [312160 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9 03 C:\WINDOWS\SysWOW64\mswsock.dll [312160 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9 04 C:\WINDOWS\SysWOW64\mswsock.dll [312160 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9 05 C:\WINDOWS\SysWOW64\mswsock.dll [312160 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9 06 C:\WINDOWS\SysWOW64\mswsock.dll [312160 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9 07 C:\WINDOWS\SysWOW64\mswsock.dll [312160 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9 08 C:\WINDOWS\SysWOW64\mswsock.dll [312160 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9 09 C:\WINDOWS\SysWOW64\mswsock.dll [312160 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9 10 C:\WINDOWS\SysWOW64\mswsock.dll [312160 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9 11 C:\WINDOWS\SysWOW64\mswsock.dll [312160 2015-10-30] (Microsoft Corporation)
Winsock: Catalog5-x64 01 C:\Windows\system32\NLAapi.dll [80896 2015-10-30] (Microsoft Corporation)
Winsock: Catalog5-x64 02 C:\Windows\system32\napinsp.dll [68096 2015-10-30] (Microsoft Corporation)
Winsock: Catalog5-x64 03 C:\Windows\system32\pnrpnsp.dll [87040 2015-10-30] (Microsoft Corporation)
Winsock: Catalog5-x64 04 C:\Windows\system32\pnrpnsp.dll [87040 2015-10-30] (Microsoft Corporation)
Winsock: Catalog5-x64 05 C:\Windows\System32\mswsock.dll [357216 2015-10-30] (Microsoft Corporation)
Winsock: Catalog5-x64 06 C:\Windows\System32\winrnr.dll [31744 2015-10-30] (Microsoft Corporation)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-30] (Apple Inc.)
Winsock: Catalog9-x64 01 C:\Windows\system32\mswsock.dll [357216 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9-x64 02 C:\Windows\system32\mswsock.dll [357216 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9-x64 03 C:\Windows\system32\mswsock.dll [357216 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9-x64 04 C:\Windows\system32\mswsock.dll [357216 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9-x64 05 C:\Windows\system32\mswsock.dll [357216 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9-x64 06 C:\Windows\system32\mswsock.dll [357216 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9-x64 07 C:\Windows\system32\mswsock.dll [357216 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9-x64 08 C:\Windows\system32\mswsock.dll [357216 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9-x64 09 C:\Windows\system32\mswsock.dll [357216 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9-x64 10 C:\Windows\system32\mswsock.dll [357216 2015-10-30] (Microsoft Corporation)
Winsock: Catalog9-x64 11 C:\Windows\system32\mswsock.dll [357216 2015-10-30] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{06f7783a-8be3-4853-9bdc-f3c10fdf6559}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{53ce3ace-6525-4820-81e2-9cd36ee7aa04}: [DhcpNameServer] 24.178.162.3 66.189.0.100 24.217.201.67
Tcpip\..\Interfaces\{917f1842-6dc1-42a6-9e1d-9c19f80ea3ac}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{917f1842-6dc1-42a6-9e1d-9c19f80ea3ac}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{de9304b9-1ba9-40e6-a340-2be205407d8b}: [DhcpNameServer] 24.178.162.3 66.189.0.100 24.217.201.67

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
URLSearchHook: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
URLSearchHook: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
SearchScopes: HKLM -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKLM -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
SearchScopes: HKLM-x32 -> DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACGW
SearchScopes: HKLM-x32 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
SearchScopes: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=BDT3
SearchScopes: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=BDT3
SearchScopes: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACGW
SearchScopes: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ACGW_enUS379
BHO: No Name -> {57434C32-2D53-5000-76A7-7A786E7484D7} -> No File
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-12-17] (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-24] (Google Inc.)
BHO: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> C:\ProgramData\WRData\pkg\LPBar64.dll => No File
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll [2013-12-16] (Microsoft Corporation.)
BHO-x32: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No File
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-12-17] (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-24] (Google Inc.)
BHO-x32: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies S.A.)
BHO-x32: No Name -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> No File
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll [2013-12-16] (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll => No File
Toolbar: HKLM - No Name - {97ab88ef-346b-4179-a0b1-7445896547a5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll [2013-12-16] (Microsoft Corporation.)
Toolbar: HKLM - No Name - {57434C32-2D53-5000-76A7-7A786E7484D7} - No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-24] (Google Inc.)
Toolbar: HKLM-x32 - No Name - {97ab88ef-346b-4179-a0b1-7445896547a5} - No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll [2013-12-16] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-24] (Google Inc.)
Toolbar: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-24] (Google Inc.)
DPF: HKLM-x32 {315B0BFB-2BD4-481B-80A3-A9B80727C61B} hxxps://webiq005.webiqonline.com/WebIQ/ ... tion&EDID={896A23A1-5821-4609-A6C6-6D5536C585C9}
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/tri ... /wrc32.ocx
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: HKLM-x32 {EDFCB7CB-942C-4822-AF14-F0B687409848} hxxp://www.disneyphotopass.com/software ... oader4.cab
Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2015-12-06] (Microsoft Corporation)
Handler-x32: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2015-12-06] (Microsoft Corporation)
Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll [2015-12-16] (Microsoft Corporation)
Handler-x32: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll [2015-12-16] (Microsoft Corporation)
Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll [2015-10-30] (Microsoft Corporation)
Handler-x32: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\msvidctl.dll [2015-10-30] (Microsoft Corporation)
Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2015-12-16] (Microsoft Corporation)
Handler-x32: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2015-12-16] (Microsoft Corporation)
Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2015-12-16] (Microsoft Corporation)
Handler-x32: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2015-12-16] (Microsoft Corporation)
Handler-x32: http - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll [2005-09-20] (Microsoft Corporation)
Handler-x32: http - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll [2005-09-20] (Microsoft Corporation)
Handler-x32: https - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll [2005-09-20] (Microsoft Corporation)
Handler-x32: https - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll [2005-09-20] (Microsoft Corporation)
Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll [2015-10-30] (Microsoft Corporation)
Handler-x32: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll [2015-10-30] (Microsoft Corporation)
Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2015-12-06] (Microsoft Corporation)
Handler-x32: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2015-12-06] (Microsoft Corporation)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll [2012-03-08] (Microsoft Corporation)
Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2015-12-16] (Microsoft Corporation)
Handler-x32: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2015-12-16] (Microsoft Corporation)
Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2015-12-06] (Microsoft Corporation)
Handler-x32: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2015-12-06] (Microsoft Corporation)
Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll [2015-10-30] (Microsoft Corporation)
Handler-x32: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll [2015-10-30] (Microsoft Corporation)
Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2015-12-16] (Microsoft Corporation)
Handler-x32: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2015-12-16] (Microsoft Corporation)
Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll [2015-10-30] (Microsoft Corporation)
Handler-x32: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll [2015-10-30] (Microsoft Corporation)
Handler-x32: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll [2005-09-20] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll [2005-09-20] (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll [2012-03-08] (Microsoft Corporation)
Handler-x32: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files (x86)\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL [2009-03-24] (Microsoft Corporation)
Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2015-12-06] (Microsoft Corporation)
Handler-x32: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2015-12-06] (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies S.A.)
Handler: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll [2015-10-30] (Microsoft Corporation)
Handler-x32: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll [2015-10-30] (Microsoft Corporation)
Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll [2015-10-30] (Microsoft Corporation)
Handler-x32: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\msvidctl.dll [2015-10-30] (Microsoft Corporation)
Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2015-12-06] (Microsoft Corporation)
Handler-x32: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2015-12-06] (Microsoft Corporation)
Handler: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll [2015-10-30] (Microsoft Corporation)
Handler-x32: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll [2015-10-30] (Microsoft Corporation)
Handler-x32: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll [2012-03-08] (Microsoft Corporation)
Handler-x32: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll [2012-03-08] (Microsoft Corporation)
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll [2015-10-30] (Microsoft Corporation)
Filter-x32: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll [2015-10-30] (Microsoft Corporation)
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll [2015-10-30] (Microsoft Corporation)
Filter-x32: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll [2015-10-30] (Microsoft Corporation)
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll [2015-10-30] (Microsoft Corporation)
Filter-x32: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll [2015-10-30] (Microsoft Corporation)
Filter-x32: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL [2007-04-19] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\2zqvvius.default
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF Keyword.URL: hxxps://www.google.com/search
FF NetworkProxy: "no_proxies_on", "*.local"
FF NetworkProxy: "type", 0
FF DefaultSearchEngine: Google
FF DefaultSearchUrl: hxxps://www.google.com/search
FF SearchEngineOrder.1: Google
FF NewTab: about:newtab
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (GARMIN Corp.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_37 -> C:\Windows\SysWOW64\npdeployJava1.dll [2012-09-24] (Sun Microsystems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-07-31] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-07-31] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-07-31] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-07-31] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-07-31] (Apple Inc.)
FF SearchPlugin: C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\2zqvvius.default\searchplugins\Google.xml [2014-06-26]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-03] [not signed]
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-17]
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2015-12-25] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2015-12-17]
FF HKLM-x32\...\Mozilla Firefox 43.0.2\Extensions: [Components] - C:\Program Files (x86)\Mozilla Firefox\components
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\components [2015-07-31] [not signed]
FF HKLM-x32\...\Mozilla Firefox 43.0.2\Extensions: [Plugins] - C:\Program Files (x86)\Mozilla Firefox\plugins
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\plugins [2015-12-28] [not signed]
FF HKLM-x32\...\Mozilla Thunderbird 38.4.0\Extensions: [Components] - C:\Program Files (x86)\Mozilla Thunderbird\components
FF Extension: No Name - C:\Program Files (x86)\Mozilla Thunderbird\components [2015-12-04] [not signed]
FF HKLM-x32\...\Mozilla Thunderbird 38.4.0\Extensions: [Plugins] - C:\Program Files (x86)\Mozilla Thunderbird\plugins => not found
FF HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\...\Mozilla Thunderbird 38.4.0\Extensions: [Components] - C:\Program Files (x86)\Mozilla Thunderbird\components
FF HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\...\Mozilla Thunderbird 38.4.0\Extensions: [Plugins] - C:\Program Files (x86)\Mozilla Thunderbird\plugins => not found
StartMenuInternet: FIREFOX.EXE - "C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\channel-prefs.js [2010-01-01]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.msn.com/?pc=AV01
CHR StartupUrls: Default -> "hxxp://www.foxnews.com/"
CHR DefaultSearchURL: Default -> {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}{google:contextualSearchVersion}ie={inputEncoding}
CHR DefaultSearchKeyword: Default -> google.com
CHR DefaultNewTabURL: Default -> {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-06]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-28]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-12-17]
StartMenuInternet: Google Chrome - "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"

==================== Services (All) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [269000 2015-08-14] (Adobe Systems Incorporated)
S3 AJRouter; C:\Windows\System32\AJRouter.dll [23040 2015-10-30] (Microsoft Corporation)
S3 ALG; C:\Windows\System32\alg.exe [97792 2015-10-30] (Microsoft Corporation)
R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [238080 2015-01-13] (AMD)
R2 AppHostSvc; C:\Windows\system32\inetsrv\apphostsvc.dll [64512 2015-12-16] (Microsoft Corporation)
R2 AppHostSvc; C:\WINDOWS\SysWOW64\inetsrv\apphostsvc.dll [56832 2015-12-16] (Microsoft Corporation)
S3 AppIDSvc; C:\Windows\System32\appidsvc.dll [45056 2015-10-30] (Microsoft Corporation)
R3 Appinfo; C:\Windows\System32\appinfo.dll [94720 2015-10-30] (Microsoft Corporation)
S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
S3 AppReadiness; C:\Windows\system32\AppReadiness.dll [504320 2015-10-30] (Microsoft Corporation)
S3 AppXSvc; C:\Windows\system32\appxdeploymentserver.dll [2156032 2015-10-30] (Microsoft Corporation)
S4 aspnet_state; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [51376 2015-10-30] (Microsoft Corporation)
R2 AudioEndpointBuilder; C:\Windows\System32\AudioEndpointBuilder.dll [275456 2015-12-16] (Microsoft Corporation)
R2 Audiosrv; C:\Windows\System32\Audiosrv.dll [1063424 2015-12-16] (Microsoft Corporation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-17] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109520 2015-12-17] (AVAST Software)
S3 AxInstSV; C:\Windows\System32\AxInstSV.dll [114176 2015-10-30] (Microsoft Corporation)
R2 BBSvc; C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe [193696 2013-12-16] (Microsoft Corporation.)
R3 BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe [247968 2013-12-16] (Microsoft Corporation.)
S3 BDESVC; C:\Windows\System32\bdesvc.dll [360448 2015-10-30] (Microsoft Corporation)
R2 BFE; C:\Windows\System32\bfe.dll [794112 2015-10-30] (Microsoft Corporation)
S2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173792 2014-06-03] (Microsoft Corp.)
R2 BITS; C:\Windows\System32\qmgr.dll [1144320 2015-10-30] (Microsoft Corporation)
R2 Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [462184 2011-08-30] (Apple Inc.)
R2 BrokerInfrastructure; C:\Windows\System32\bisrv.dll [587776 2015-10-30] (Microsoft Corporation)
R3 Browser; C:\Windows\System32\browser.dll [134656 2015-10-30] (Microsoft Corporation)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [326144 2015-10-30] (Microsoft Corporation)
S3 bthserv; C:\Windows\system32\bthserv.dll [91136 2015-10-30] (Microsoft Corporation)
S4 CDPSvc; C:\Windows\System32\CDPSvc.dll [287744 2015-10-30] (Microsoft Corporation)
S3 CertPropSvc; C:\Windows\System32\certprop.dll [192000 2015-10-30] (Microsoft Corporation)
S3 ClipSVC; C:\Windows\System32\ClipSVC.dll [625000 2015-10-30] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\system32\coremessaging.dll [764976 2015-10-30] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\WINDOWS\SysWOW64\coremessaging.dll [461824 2015-10-30] (Microsoft Corporation)
R2 CryptSvc; C:\Windows\system32\cryptsvc.dll [78848 2015-10-30] (Microsoft Corporation)
R2 DcomLaunch; C:\Windows\system32\rpcss.dll [904704 2015-10-30] (Microsoft Corporation)
S3 DcpSvc; C:\Windows\system32\dcpsvc.dll [186880 2015-10-30] (Microsoft Corporation)
S3 defragsvc; C:\Windows\System32\defragsvc.dll [527872 2015-10-30] (Microsoft Corporation)
R2 DeviceAssociationService; C:\Windows\system32\das.dll [444928 2015-10-30] (Microsoft Corporation)
S3 DeviceInstall; C:\Windows\system32\umpnpmgr.dll [111616 2015-10-30] (Microsoft Corporation)
S3 DevQueryBroker; C:\Windows\system32\DevQueryBroker.dll [34304 2015-10-30] (Microsoft Corporation)
R2 Dhcp; C:\Windows\system32\dhcpcore.dll [355840 2015-10-30] (Microsoft Corporation)
R2 Dhcp; C:\WINDOWS\SysWOW64\dhcpcore.dll [293888 2015-10-30] (Microsoft Corporation)
S3 diagnosticshub.standardcollector.service; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [31744 2015-10-30] (Microsoft Corporation)
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1613664 2015-10-30] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\system32\Windows.Internal.Management.dll [278016 2015-10-30] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll [200192 2015-10-30] (Microsoft Corporation)
S3 dmwappushservice; C:\Windows\system32\dmwappushsvc.dll [57856 2015-10-30] (Microsoft Corporation)
R2 Dnscache; C:\Windows\System32\dnsrslvr.dll [284672 2015-10-30] (Microsoft Corporation)
S2 DoSvc; C:\Windows\system32\dosvc.dll [1090048 2015-10-30] (Microsoft Corporation)
S3 dot3svc; C:\Windows\System32\dot3svc.dll [264704 2015-10-30] (Microsoft Corporation)
R2 DPS; C:\Windows\system32\dps.dll [170496 2015-10-30] (Microsoft Corporation)
S3 DsmSvc; C:\Windows\System32\DeviceSetupManager.dll [205824 2015-10-30] (Microsoft Corporation)
S3 DsSvc; C:\Windows\System32\DsSvc.dll [145408 2015-10-30] (Microsoft Corporation)
S3 Eaphost; C:\Windows\System32\eapsvc.dll [112640 2015-10-30] (Microsoft Corporation)
S3 EFS; C:\Windows\system32\efssvc.dll [60416 2015-10-30] (Microsoft Corporation)
S3 embeddedmode; C:\Windows\System32\embeddedmodesvc.dll [111616 2015-10-30] (Microsoft Corporation)
S3 EntAppSvc; C:\Windows\system32\EnterpriseAppMgmtSvc.dll [313856 2015-10-30] (Microsoft Corporation)
R2 EventLog; C:\Windows\System32\wevtsvc.dll [1743872 2015-10-30] (Microsoft Corporation)
R2 EventSystem; C:\Windows\system32\es.dll [473088 2015-10-30] (Microsoft Corporation)
R2 EventSystem; C:\WINDOWS\SysWOW64\es.dll [345600 2015-10-30] (Microsoft Corporation)
S3 Fax; C:\Windows\system32\fxssvc.exe [651776 2015-10-30] (Microsoft Corporation)
R3 fdPHost; C:\Windows\system32\fdPHost.dll [21504 2015-10-30] (Microsoft Corporation)
R2 FDResPub; C:\Windows\system32\fdrespub.dll [35840 2015-10-30] (Microsoft Corporation)
S3 fhsvc; C:\Windows\system32\fhsvc.dll [118784 2015-10-30] (Microsoft Corporation)
R2 FontCache; C:\Windows\system32\FntCache.dll [1671168 2015-10-30] (Microsoft Corporation)
S3 FontCache3.0.0.0; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [43696 2015-10-23] (Microsoft Corporation)
S3 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [777744 2015-10-29] (Garmin Ltd. or its subsidiaries)
R2 gpsvc; C:\Windows\System32\gpsvc.dll [1338368 2015-10-30] (Microsoft Corporation)
R2 Greg_Service; C:\Program Files (x86)\Gateway\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated)
S2 gupdate; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc.)
S3 gupdatem; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc.)
S3 gusvc; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [194032 2014-03-31] (Google)
R3 hidserv; C:\Windows\system32\hidserv.dll [36864 2015-10-30] (Microsoft Corporation)
R3 hidserv; C:\WINDOWS\SysWOW64\hidserv.dll [31744 2015-10-30] (Microsoft Corporation)
S3 HomeGroupListener; C:\Windows\system32\ListSvc.dll [279040 2015-10-30] (Microsoft Corporation)
R3 HomeGroupProvider; C:\Windows\system32\provsvc.dll [464384 2015-10-30] (Microsoft Corporation)
R3 HomeGroupProvider; C:\WINDOWS\SysWOW64\provsvc.dll [381440 2015-10-30] (Microsoft Corporation)
S3 icssvc; C:\Windows\System32\tetheringservice.dll [162304 2015-12-16] (Microsoft Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [117760 2015-10-30] (Microsoft Corporation)
S3 IKEEXT; C:\Windows\System32\ikeext.dll [957952 2015-10-30] (Microsoft Corporation)
R2 iphlpsvc; C:\Windows\System32\iphlpsvc.dll [958464 2015-10-30] (Microsoft Corporation)
R3 KeyIso; C:\Windows\system32\keyiso.dll [97792 2015-10-30] (Microsoft Corporation)
R3 KeyIso; C:\WINDOWS\SysWOW64\keyiso.dll [70656 2015-10-30] (Microsoft Corporation)
S3 KtmRm; C:\Windows\system32\msdtckrm.dll [378880 2015-10-30] (Microsoft Corporation)
R2 LanmanServer; C:\Windows\system32\srvsvc.dll [283136 2015-10-30] (Microsoft Corporation)
R2 LanmanWorkstation; C:\Windows\System32\wkssvc.dll [274432 2015-10-30] (Microsoft Corporation)
S3 lfsvc; C:\Windows\System32\lfsvc.dll [27136 2015-10-30] (Microsoft Corporation)
S3 lfsvc; C:\WINDOWS\SysWOW64\lfsvc.dll [22528 2015-10-30] (Microsoft Corporation)
S3 LicenseManager; C:\Windows\system32\LicenseManagerSvc.dll [22528 2015-10-30] (Microsoft Corporation)
S3 lltdsvc; C:\Windows\System32\lltdsvc.dll [280576 2015-10-30] (Microsoft Corporation)
R3 lmhosts; C:\Windows\System32\lmhsvc.dll [24576 2015-10-30] (Microsoft Corporation)
R2 LSM; C:\Windows\System32\lsm.dll [729600 2015-10-30] (Microsoft Corporation)
S2 LVPrcS64; C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcSrv.exe [197976 2010-05-07] (Logitech Inc.)
S2 MapsBroker; C:\Windows\System32\moshost.dll [66560 2015-12-06] (Microsoft Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 MessagingService; C:\Windows\System32\MessagingService.dll [52736 2015-10-30] (Microsoft Corporation)
S3 MessagingService_3ff71; C:\WINDOWS\system32\svchost.exe [43944 2015-10-30] (Microsoft Corporation)
S3 MessagingService_3ff71; C:\WINDOWS\SysWOW64\svchost.exe [37256 2015-10-30] (Microsoft Corporation)
U3 MessagingService_55ff8; C:\WINDOWS\system32\svchost.exe [43944 2015-10-30] (Microsoft Corporation)
U3 MessagingService_55ff8; C:\WINDOWS\SysWOW64\svchost.exe [37256 2015-10-30] (Microsoft Corporation)
S3 MozillaMaintenance; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [147624 2015-12-04] (Mozilla Foundation)
R2 MpsSvc; C:\Windows\system32\mpssvc.dll [870912 2015-10-30] (Microsoft Corporation)
S3 MSDTC; C:\Windows\System32\msdtc.exe [147968 2015-10-30] (Microsoft Corporation)
S3 MSiSCSI; C:\Windows\system32\iscsiexe.dll [151040 2015-10-30] (Microsoft Corporation)
S3 msiserver; C:\Windows\System32\msiexec.exe [66048 2015-10-30] (Microsoft Corporation)
S3 msiserver; C:\WINDOWS\SysWOW64\msiexec.exe [58368 2015-10-30] (Microsoft Corporation)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [26624 2015-12-16] (Microsoft Corporation)
S3 NcaSvc; C:\Windows\System32\ncasvc.dll [168960 2015-10-30] (Microsoft Corporation)
R3 NcbService; C:\Windows\System32\ncbservice.dll [339968 2015-10-30] (Microsoft Corporation)
S3 NcdAutoSetup; C:\Windows\System32\NcdAutoSetup.dll [81408 2015-10-30] (Microsoft Corporation)
S3 Netlogon; C:\Windows\system32\netlogon.dll [846848 2015-10-30] (Microsoft Corporation)
S3 Netlogon; C:\WINDOWS\SysWOW64\netlogon.dll [713216 2015-10-30] (Microsoft Corporation)
R3 Netman; C:\Windows\System32\netman.dll [265728 2015-10-30] (Microsoft Corporation)
R2 NetMsmqActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [135848 2015-10-30] (Microsoft Corporation)
R2 NetPipeActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [135848 2015-10-30] (Microsoft Corporation)
R3 netprofm; C:\Windows\System32\netprofmsvc.dll [547840 2015-10-30] (Microsoft Corporation)
S3 NetSetupSvc; C:\Windows\System32\NetSetupSvc.dll [203776 2015-12-06] (Microsoft Corporation)
R2 NetTcpActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [135848 2015-10-30] (Microsoft Corporation)
R3 NetTcpPortSharing; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [135848 2015-10-30] (Microsoft Corporation)
S3 NgcCtnrSvc; C:\Windows\System32\NgcCtnrSvc.dll [289792 2015-10-30] (Microsoft Corporation)
S3 NgcSvc; C:\Windows\system32\ngcsvc.dll [649216 2015-10-30] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\nlasvc.dll [371712 2015-10-30] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\nsisvc.dll [30720 2015-10-30] (Microsoft Corporation)
S2 OneSyncSvc; C:\Windows\System32\APHostService.dll [342016 2015-10-30] (Microsoft Corporation)
R2 OneSyncSvc_3ff71; C:\WINDOWS\system32\svchost.exe [43944 2015-10-30] (Microsoft Corporation)
R2 OneSyncSvc_3ff71; C:\WINDOWS\SysWOW64\svchost.exe [37256 2015-10-30] (Microsoft Corporation)
U2 OneSyncSvc_55ff8; C:\WINDOWS\system32\svchost.exe [43944 2015-10-30] (Microsoft Corporation)
U2 OneSyncSvc_55ff8; C:\WINDOWS\SysWOW64\svchost.exe [37256 2015-10-30] (Microsoft Corporation)
S3 ose; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation)
S3 p2pimsvc; C:\Windows\system32\pnrpsvc.dll [351232 2015-10-30] (Microsoft Corporation)
S3 p2psvc; C:\Windows\system32\p2psvc.dll [434176 2015-10-30] (Microsoft Corporation)
R2 PcaSvc; C:\Windows\System32\pcasvc.dll [528736 2015-10-30] (Microsoft Corporation)
S3 PerfHost; C:\Windows\SysWow64\perfhost.exe [21504 2015-10-30] (Microsoft Corporation)
S3 PhoneSvc; C:\Windows\System32\PhoneService.dll [747520 2015-10-30] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc; C:\Windows\System32\PimIndexMaintenance.dll [252928 2015-10-30] (Microsoft Corporation)
R3 PimIndexMaintenanceSvc_3ff71; C:\WINDOWS\system32\svchost.exe [43944 2015-10-30] (Microsoft Corporation)
R3 PimIndexMaintenanceSvc_3ff71; C:\WINDOWS\SysWOW64\svchost.exe [37256 2015-10-30] (Microsoft Corporation)
U3 PimIndexMaintenanceSvc_55ff8; C:\WINDOWS\system32\svchost.exe [43944 2015-10-30] (Microsoft Corporation)
U3 PimIndexMaintenanceSvc_55ff8; C:\WINDOWS\SysWOW64\svchost.exe [37256 2015-10-30] (Microsoft Corporation)
S3 pla; C:\Windows\system32\pla.dll [1487360 2015-10-30] (Microsoft Corporation)
S3 pla; C:\WINDOWS\SysWOW64\pla.dll [1537024 2015-10-30] (Microsoft Corporation)
R3 PlugPlay; C:\Windows\system32\umpnpmgr.dll [111616 2015-10-30] (Microsoft Corporation)
S3 PNRPAutoReg; C:\Windows\system32\pnrpauto.dll [27648 2015-10-30] (Microsoft Corporation)
S3 PNRPsvc; C:\Windows\system32\pnrpsvc.dll [351232 2015-10-30] (Microsoft Corporation)
R3 PolicyAgent; C:\Windows\System32\ipsecsvc.dll [390656 2015-10-30] (Microsoft Corporation)
R2 Power; C:\Windows\system32\umpo.dll [113664 2015-10-30] (Microsoft Corporation)
S3 PrintNotify; C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll [3337728 2015-10-30] (Microsoft Corporation)
R2 ProfSvc; C:\Windows\system32\profsvc.dll [328192 2015-10-30] (Microsoft Corporation)
S3 QWAVE; C:\Windows\system32\qwave.dll [286720 2015-10-30] (Microsoft Corporation)
S3 QWAVE; C:\WINDOWS\SysWOW64\qwave.dll [246784 2015-10-30] (Microsoft Corporation)
S3 RasAuto; C:\Windows\System32\rasauto.dll [106496 2015-10-30] (Microsoft Corporation)
S3 RasMan; C:\Windows\System32\rasmans.dll [696320 2015-10-30] (Microsoft Corporation)
S4 RemoteAccess; C:\Windows\System32\mprdim.dll [507904 2015-10-30] (Microsoft Corporation)
S4 RemoteAccess; C:\WINDOWS\SysWOW64\mprdim.dll [436224 2015-10-30] (Microsoft Corporation)
S4 RemoteRegistry; C:\Windows\system32\regsvc.dll [156160 2015-10-30] (Microsoft Corporation)
S3 RetailDemo; C:\Windows\system32\RDXService.dll [1073152 2015-10-30] (Microsoft Corporation)
R2 RpcEptMapper; C:\Windows\System32\RpcEpMap.dll [79360 2015-10-30] (Microsoft Corporation)
S3 RpcLocator; C:\Windows\system32\locator.exe [10752 2015-10-30] (Microsoft Corporation)
R2 RpcSs; C:\Windows\system32\rpcss.dll [904704 2015-10-30] (Microsoft Corporation)
R2 SamSs; C:\Windows\system32\lsass.exe [57912 2015-10-30] (Microsoft Corporation)
S4 SCardSvr; C:\Windows\System32\SCardSvr.dll [235520 2015-10-30] (Microsoft Corporation)
S3 ScDeviceEnum; C:\Windows\System32\ScDeviceEnum.dll [181760 2015-10-30] (Microsoft Corporation)
R2 Schedule; C:\Windows\system32\schedsvc.dll [1012224 2015-10-30] (Microsoft Corporation)
S3 SCPolicySvc; C:\Windows\System32\certprop.dll [192000 2015-10-30] (Microsoft Corporation)
R3 SDRSVC; C:\Windows\System32\SDRSVC.dll [150528 2015-10-30] (Microsoft Corporation)
S3 seclogon; C:\Windows\system32\seclogon.dll [31232 2015-10-30] (Microsoft Corporation)
R2 SENS; C:\Windows\System32\sens.dll [73216 2015-10-30] (Microsoft Corporation)
S3 SensorDataService; C:\Windows\System32\SensorDataService.exe [1297408 2015-10-30] (Microsoft Corporation)
S3 SensorService; C:\Windows\system32\SensorService.dll [342016 2015-12-16] (Microsoft Corporation)
S3 SensrSvc; C:\Windows\system32\sensrsvc.dll [180224 2015-10-30] (Microsoft Corporation)
S3 SessionEnv; C:\Windows\system32\sessenv.dll [372736 2015-10-30] (Microsoft Corporation)
S3 SessionEnv; C:\WINDOWS\SysWOW64\sessenv.dll [313344 2015-10-30] (Microsoft Corporation)
S2 SharedAccess; C:\Windows\System32\ipnathlp.dll [457728 2015-10-30] (Microsoft Corporation)
R2 ShellHWDetection; C:\Windows\System32\shsvcs.dll [608768 2015-10-30] (Microsoft Corporation)
R2 ShellHWDetection; C:\WINDOWS\SysWOW64\shsvcs.dll [559616 2015-10-30] (Microsoft Corporation)
S2 SkypeUpdate; C:\Program Files (x86)\Skype\Updater\Updater.exe [327296 2015-07-09] (Skype Technologies)
S3 smphost; C:\Windows\System32\smphost.dll [23552 2015-10-30] (Microsoft Corporation)
S3 smphost; C:\WINDOWS\SysWOW64\smphost.dll [20992 2015-10-30] (Microsoft Corporation)
S3 SmsRouter; C:\Windows\system32\SmsRouterSvc.dll [590336 2015-10-30] (Microsoft Corporation)
S3 SNMPTRAP; C:\Windows\System32\snmptrap.exe [15872 2015-10-30] (Microsoft Corporation)
R2 Spooler; C:\Windows\System32\spoolsv.exe [755712 2015-10-30] (Microsoft Corporation)
S2 sppsvc; C:\Windows\system32\sppsvc.exe [6536248 2015-10-30] (Microsoft Corporation)
R3 SSDPSRV; C:\Windows\System32\ssdpsrv.dll [239616 2015-10-30] (Microsoft Corporation)
S3 SstpSvc; C:\Windows\system32\sstpsvc.dll [212480 2015-10-30] (Microsoft Corporation)
R3 StateRepository; C:\Windows\system32\windows.staterepository.dll [2745856 2015-10-30] (Microsoft Corporation)
R3 StateRepository; C:\WINDOWS\SysWOW64\windows.staterepository.dll [2179584 2015-10-30] (Microsoft Corporation)
R2 stisvc; C:\Windows\System32\wiaservc.dll [643584 2015-10-30] (Microsoft Corporation)
S3 StorSvc; C:\Windows\system32\storsvc.dll [618496 2015-12-06] (Microsoft Corporation)
S3 svsvc; C:\Windows\system32\svsvc.dll [13824 2015-10-30] (Microsoft Corporation)
S3 swprv; C:\Windows\System32\swprv.dll [467456 2015-10-30] (Microsoft Corporation)
R2 SysMain; C:\Windows\system32\sysmain.dll [1088512 2015-10-30] (Microsoft Corporation)
R2 SystemEventsBroker; C:\Windows\System32\SystemEventsBrokerServer.dll [380416 2015-10-30] (Microsoft Corporation)
S3 TabletInputService; C:\Windows\System32\TabSvc.dll [151040 2015-10-30] (Microsoft Corporation)
S3 TapiSrv; C:\Windows\System32\tapisrv.dll [311808 2015-10-30] (Microsoft Corporation)
S3 TapiSrv; C:\WINDOWS\SysWOW64\tapisrv.dll [254976 2015-10-30] (Microsoft Corporation)
S3 TermService; C:\Windows\System32\termsrv.dll [1033216 2015-10-30] (Microsoft Corporation)
R2 Themes; C:\Windows\system32\themeservice.dll [59392 2015-10-30] (Microsoft Corporation)
S3 TieringEngineService; C:\Windows\system32\TieringEngineService.exe [290304 2015-10-30] (Microsoft Corporation)
R2 tiledatamodelsvc; C:\Windows\system32\tileobjserver.dll [490496 2015-10-30] (Microsoft Corporation)
R3 TimeBroker; C:\Windows\System32\TimeBrokerServer.dll [164864 2015-10-30] (Microsoft Corporation)
R2 TrkWks; C:\Windows\System32\trkwks.dll [115200 2015-10-30] (Microsoft Corporation)
S3 TrustedInstaller; C:\Windows\servicing\TrustedInstaller.exe [121856 2015-10-30] (Microsoft Corporation)
S4 tzautoupdate; C:\Windows\system32\tzautoupdate.dll [87040 2015-12-16] (Microsoft Corporation)
S3 UI0Detect; C:\Windows\system32\UI0Detect.exe [43008 2015-10-30] (Microsoft Corporation)
S3 UmRdpService; C:\Windows\System32\umrdp.dll [278016 2015-10-30] (Microsoft Corporation)
S3 UnistoreSvc; C:\Windows\System32\unistore.dll [1223168 2015-12-16] (Microsoft Corporation)
S3 UnistoreSvc; C:\WINDOWS\SysWOW64\unistore.dll [948224 2015-12-16] (Microsoft Corporation)
R3 UnistoreSvc_3ff71; C:\WINDOWS\System32\svchost.exe [43944 2015-10-30] (Microsoft Corporation)
R3 UnistoreSvc_3ff71; C:\WINDOWS\SysWOW64\svchost.exe [37256 2015-10-30] (Microsoft Corporation)
U3 UnistoreSvc_55ff8; C:\WINDOWS\System32\svchost.exe [43944 2015-10-30] (Microsoft Corporation)
U3 UnistoreSvc_55ff8; C:\WINDOWS\SysWOW64\svchost.exe [37256 2015-10-30] (Microsoft Corporation)
R2 Updater Service; C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe [240160 2009-07-03] (Acer)
S3 upnphost; C:\Windows\System32\upnphost.dll [452608 2015-10-30] (Microsoft Corporation)
S3 upnphost; C:\WINDOWS\SysWOW64\upnphost.dll [329216 2015-10-30] (Microsoft Corporation)
S3 UserDataSvc; C:\Windows\System32\userdataservice.dll [1491456 2015-10-30] (Microsoft Corporation)
R3 UserDataSvc_3ff71; C:\WINDOWS\system32\svchost.exe [43944 2015-10-30] (Microsoft Corporation)
R3 UserDataSvc_3ff71; C:\WINDOWS\SysWOW64\svchost.exe [37256 2015-10-30] (Microsoft Corporation)
U3 UserDataSvc_55ff8; C:\WINDOWS\system32\svchost.exe [43944 2015-10-30] (Microsoft Corporation)
U3 UserDataSvc_55ff8; C:\WINDOWS\SysWOW64\svchost.exe [37256 2015-10-30] (Microsoft Corporation)
R2 UserManager; C:\Windows\System32\usermgr.dll [912384 2015-12-16] (Microsoft Corporation)
S3 UsoSvc; C:\Windows\system32\usocore.dll [360960 2015-10-30] (Microsoft Corporation)
R3 VaultSvc; C:\Windows\System32\vaultsvc.dll [361984 2015-10-30] (Microsoft Corporation)
S3 vds; C:\Windows\System32\vds.exe [667136 2015-10-30] (Microsoft Corporation)
S3 vmicguestinterface; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
S3 vmicheartbeat; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
S3 vmickvpexchange; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
S3 vmicrdv; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
S3 vmicshutdown; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
S3 vmictimesync; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
S3 vmicvmsession; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
S3 VSS; C:\Windows\system32\vssvc.exe [1465344 2015-10-30] (Microsoft Corporation)
S3 W32Time; C:\Windows\system32\w32time.dll [526848 2015-10-30] (Microsoft Corporation)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [84480 2015-12-16] (Microsoft Corporation)
S3 w3logsvc; C:\WINDOWS\SysWOW64\inetsrv\w3logsvc.dll [72192 2015-12-16] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [579072 2015-12-16] (Microsoft Corporation)
R2 W3SVC; C:\WINDOWS\SysWOW64\inetsrv\iisw3adm.dll [504320 2015-12-16] (Microsoft Corporation)
S3 WalletService; C:\Windows\system32\WalletService.dll [497664 2015-10-30] (Microsoft Corporation)
R3 WAS; C:\Windows\system32\inetsrv\iisw3adm.dll [579072 2015-12-16] (Microsoft Corporation)
R3 WAS; C:\WINDOWS\SysWOW64\inetsrv\iisw3adm.dll [504320 2015-12-16] (Microsoft Corporation)
S3 wbengine; C:\Windows\system32\wbengine.exe [1570816 2015-10-30] (Microsoft Corporation)
S2 WbioSrvc; C:\Windows\System32\wbiosrvc.dll [621568 2015-10-30] (Microsoft Corporation)
R2 Wcmsvc; C:\Windows\System32\wcmsvc.dll [607232 2015-12-06] (Microsoft Corporation)
S3 wcncsvc; C:\Windows\System32\wcncsvc.dll [471040 2015-10-30] (Microsoft Corporation)
S3 WcsPlugInService; C:\Windows\System32\WcsPlugInService.dll [43008 2015-10-30] (Microsoft Corporation)
S3 WcsPlugInService; C:\WINDOWS\SysWOW64\WcsPlugInService.dll [33792 2015-10-30] (Microsoft Corporation)
R3 WdiServiceHost; C:\Windows\system32\wdi.dll [100352 2015-10-30] (Microsoft Corporation)
R3 WdiServiceHost; C:\WINDOWS\SysWOW64\wdi.dll [89600 2015-10-30] (Microsoft Corporation)
R3 WdiSystemHost; C:\Windows\system32\wdi.dll [100352 2015-10-30] (Microsoft Corporation)
R3 WdiSystemHost; C:\WINDOWS\SysWOW64\wdi.dll [89600 2015-10-30] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WebClient; C:\Windows\System32\webclnt.dll [228864 2015-10-30] (Microsoft Corporation)
S3 WebClient; C:\WINDOWS\SysWOW64\webclnt.dll [199680 2015-10-30] (Microsoft Corporation)
S3 Wecsvc; C:\Windows\system32\wecsvc.dll [211456 2015-10-30] (Microsoft Corporation)
S3 WEPHOSTSVC; C:\Windows\system32\wephostsvc.dll [27648 2015-10-30] (Microsoft Corporation)
S3 wercplsupport; C:\Windows\System32\wercplsupport.dll [96256 2015-10-30] (Microsoft Corporation)
S3 WerSvc; C:\Windows\System32\WerSvc.dll [143360 2015-10-30] (Microsoft Corporation)
S3 WiaRpc; C:\Windows\System32\wiarpc.dll [75264 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
R3 WinHttpAutoProxySvc; C:\Windows\system32\winhttp.dll [794112 2015-10-30] (Microsoft Corporation)
R3 WinHttpAutoProxySvc; C:\WINDOWS\SysWOW64\winhttp.dll [613888 2015-10-30] (Microsoft Corporation)
R2 Winmgmt; C:\Windows\system32\wbem\WMIsvc.dll [225280 2015-10-30] (Microsoft Corporation)
S3 WinRM; C:\Windows\system32\WsmSvc.dll [2573824 2015-10-30] (Microsoft Corporation)
S3 WinRM; C:\WINDOWS\SysWOW64\WsmSvc.dll [2177024 2015-10-30] (Microsoft Corporation)
R2 WlanSvc; C:\Windows\System32\wlansvc.dll [2295808 2015-10-30] (Microsoft Corporation)
S3 wlidsvc; C:\Windows\system32\wlidsvc.dll [2058240 2015-10-30] (Microsoft Corporation)
S3 wmiApSrv; C:\Windows\system32\wbem\WmiApSrv.exe [202752 2015-10-30] (Microsoft Corporation)
S3 WMPNetworkSvc; C:\Program Files\Windows Media Player\wmpnetwk.exe [1474560 2015-10-30] (Microsoft Corporation)
S3 workfolderssvc; C:\Windows\system32\workfolderssvc.dll [1872896 2015-10-30] (Microsoft Corporation)
S3 WPDBusEnum; C:\Windows\system32\wpdbusenum.dll [86528 2015-10-30] (Microsoft Corporation)
S3 WpnService; C:\Windows\system32\WpnService.dll [49152 2015-10-30] (Microsoft Corporation)
R2 wscsvc; C:\Windows\System32\wscsvc.dll [187904 2015-10-30] (Microsoft Corporation)
R2 WSearch; C:\Windows\system32\SearchIndexer.exe [938496 2015-10-30] (Microsoft Corporation)
R2 WSearch; C:\WINDOWS\SysWOW64\SearchIndexer.exe [759808 2015-10-30] (Microsoft Corporation)
S3 WSService; C:\Windows\System32\WSService.dll [3449168 2015-10-30] (Microsoft Corporation)
R3 wuauserv; C:\Windows\system32\wuaueng.dll [2280448 2015-12-16] (Microsoft Corporation)
R3 wudfsvc; C:\Windows\System32\WUDFSvc.dll [104448 2015-10-30] (Microsoft Corporation)
S3 WwanSvc; C:\Windows\System32\wwansvc.dll [1212928 2015-12-16] (Microsoft Corporation)
S3 XblAuthManager; C:\Windows\System32\XblAuthManager.dll [948224 2015-12-16] (Microsoft Corporation)
S3 XblGameSave; C:\Windows\System32\XblGameSave.dll [1130496 2015-10-30] (Microsoft Corporation)
S3 XboxNetApiSvc; C:\Windows\system32\XboxNetApiSvc.dll [1035776 2015-12-06] (Microsoft Corporation)
S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

==================== Drivers (All) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 1394ohci; C:\Windows\System32\drivers\1394ohci.sys [235520 2015-10-30] (Microsoft Corporation)
S0 3ware; C:\Windows\System32\drivers\3ware.sys [107360 2015-10-30] (LSI)
R0 ACPI; C:\Windows\System32\drivers\ACPI.sys [563544 2015-10-30] (Microsoft Corporation)
R0 acpiex; C:\Windows\System32\Drivers\acpiex.sys [127840 2015-10-30] (Microsoft Corporation)
S3 acpipagr; C:\Windows\System32\drivers\acpipagr.sys [12288 2015-10-30] (Microsoft Corporation)
S3 AcpiPmi; C:\Windows\System32\drivers\acpipmi.sys [14336 2015-10-30] (Microsoft Corporation)
S3 acpitime; C:\Windows\System32\drivers\acpitime.sys [12800 2015-10-30] (Microsoft Corporation)
S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [1135456 2015-10-30] (PMC-Sierra)
R1 AFD; C:\Windows\system32\drivers\afd.sys [578912 2015-12-16] (Microsoft Corporation)
S0 agp440; C:\Windows\System32\drivers\agp440.sys [63328 2015-10-30] (Microsoft Corporation)
R1 ahcache; C:\Windows\System32\DRIVERS\ahcache.sys [218624 2015-10-30] (Microsoft Corporation)
S3 AmdK8; C:\Windows\System32\drivers\amdk8.sys [121856 2015-10-30] (Microsoft Corporation)
R3 amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [11922944 2015-01-13] (Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [359936 2015-01-13] (Advanced Micro Devices, Inc.)
R3 AmdPPM; C:\Windows\System32\drivers\amdppm.sys [119296 2015-10-30] (Microsoft Corporation)
S0 amdsata; C:\Windows\System32\drivers\amdsata.sys [83296 2015-10-30] (Advanced Micro Devices)
S0 amdsbs; C:\Windows\System32\drivers\amdsbs.sys [259424 2015-10-30] (AMD Technologies Inc.)
S0 amdxata; C:\Windows\System32\drivers\amdxata.sys [26976 2015-10-30] (Advanced Micro Devices)
S3 AppID; C:\Windows\System32\drivers\appid.sys [146272 2015-10-30] (Microsoft Corporation)
S0 arcsas; C:\Windows\System32\drivers\arcsas.sys [131936 2015-10-30] (PMC-Sierra, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-12-17] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-12-17] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-12-19] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [466400 2015-12-17] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-12-17] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-12-17] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1055560 2015-12-17] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [451040 2015-12-19] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2015-12-17] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-12-17] (AVAST Software)
S3 AsyncMac; C:\Windows\System32\drivers\asyncmac.sys [28160 2015-10-30] (Microsoft Corporation)
R0 atapi; C:\Windows\System32\drivers\atapi.sys [28512 2015-10-30] (Microsoft Corporation)
R3 AtiHdmiService; C:\Windows\system32\drivers\AtiHdmi.sys [114192 2009-06-04] (ATI Research Inc.)
R0 AtiPcie; C:\Windows\System32\drivers\AtiPcie.sys [16440 2009-05-04] (Advanced Micro Devices Inc.)
R3 AVer7231_x64; C:\Windows\system32\DRIVERS\AVer7231_x64.sys [1622528 2009-08-24] (AVerMedia TECHNOLOGIES, Inc.)
S0 b06bdrv; C:\Windows\System32\drivers\bxvbda.sys [531296 2015-10-30] (Broadcom Corporation)
R1 BasicDisplay; C:\Windows\System32\drivers\BasicDisplay.sys [55808 2015-10-30] (Microsoft Corporation)
R1 BasicRender; C:\Windows\System32\drivers\BasicRender.sys [41472 2015-10-30] (Microsoft Corporation)
U5 BattC; C:\Windows\System32\Drivers\BattC.sys [36704 2015-10-30] (Microsoft Corporation)
S3 bcmfn; C:\Windows\System32\drivers\bcmfn.sys [9728 2015-10-30] (Windows (R) Win 7 DDK provider)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [9728 2015-10-30] (Windows (R) Win 7 DDK provider)
R1 Beep; C:\Windows\System32\Drivers\Beep.sys [9728 2015-10-30] (Microsoft Corporation)
R3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [105984 2015-10-30] (Microsoft Corporation)
S3 BthAvrcpTg; C:\Windows\System32\drivers\BthAvrcpTg.sys [43008 2015-10-30] (Microsoft Corporation)
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [65536 2015-10-30] (Microsoft Corporation)
S3 bthhfhid; C:\Windows\System32\drivers\BthHFHid.sys [30720 2015-10-30] (Microsoft Corporation)
S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [65536 2015-10-30] (Microsoft Corporation)
S3 buttonconverter; C:\Windows\System32\drivers\buttonconverter.sys [37376 2015-10-30] (Microsoft Corporation)
S3 CapImg; C:\Windows\System32\drivers\capimg.sys [117248 2015-12-16] (Microsoft Corporation)
S4 cdfs; C:\Windows\System32\DRIVERS\cdfs.sys [92672 2015-10-30] (Microsoft Corporation)
R1 cdrom; C:\Windows\System32\drivers\cdrom.sys [173568 2015-10-30] (Microsoft Corporation)
S3 circlass; C:\Windows\System32\drivers\circlass.sys [48640 2015-10-30] (Microsoft Corporation)
R0 CLFS; C:\Windows\System32\drivers\CLFS.sys [385376 2015-10-30] (Microsoft Corporation)
S3 CmBatt; C:\Windows\System32\drivers\CmBatt.sys [29696 2015-10-30] (Microsoft Corporation)
R0 CNG; C:\Windows\System32\Drivers\cng.sys [604928 2015-12-16] (Microsoft Corporation)
S4 cnghwassist; C:\Windows\System32\DRIVERS\cnghwassist.sys [39264 2015-10-30] (Microsoft Corporation)
R3 CompositeBus; C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_912dfdedc3d2f520\CompositeBus.sys [40448 2015-10-30] (Microsoft Corporation)
R3 condrv; C:\Windows\System32\drivers\condrv.sys [50016 2015-10-30] (Microsoft Corporation)
S1 dam; C:\Windows\System32\drivers\dam.sys [61280 2015-10-30] (Microsoft Corporation)
R1 Dfsc; C:\Windows\System32\Drivers\dfsc.sys [148480 2015-10-30] (Microsoft Corporation)
R0 disk; C:\Windows\System32\drivers\disk.sys [103264 2015-10-30] (Microsoft Corporation)
S3 dmvsc; C:\Windows\System32\drivers\dmvsc.sys [33792 2015-10-30] (Microsoft Corporation)
S3 drmkaud; C:\Windows\system32\DRIVERS\drmkaud.sys [16168 2015-10-30] (Microsoft Corporation)
R3 DXGKrnl; C:\Windows\System32\drivers\dxgkrnl.sys [1997664 2015-10-30] (Microsoft Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3436896 2015-10-30] (QLogic Corporation)
S0 EhStorClass; C:\Windows\System32\drivers\EhStorClass.sys [88416 2015-10-30] (Microsoft Corporation)
S0 EhStorTcgDrv; C:\Windows\System32\drivers\EhStorTcgDrv.sys [117088 2015-10-30] (Microsoft Corporation)
S3 ErrDev; C:\Windows\System32\drivers\errdev.sys [12288 2015-10-30] (Microsoft Corporation)
S3 exfat; C:\Windows\System32\Drivers\exfat.sys [320000 2015-10-30] (Microsoft Corporation)
S3 fastfat; C:\Windows\System32\Drivers\fastfat.sys [335712 2015-10-30] (Microsoft Corporation)
S3 fdc; C:\Windows\System32\drivers\fdc.sys [32256 2015-10-30] (Microsoft Corporation)
R1 FileCrypt; C:\Windows\System32\drivers\filecrypt.sys [87040 2015-10-30] (Microsoft Corporation)
R0 FileInfo; C:\Windows\System32\drivers\fileinfo.sys [85344 2015-10-30] (Microsoft Corporation)
S3 Filetrace; C:\Windows\System32\drivers\filetrace.sys [35840 2015-10-30] (Microsoft Corporation)
S3 flpydisk; C:\Windows\System32\drivers\flpydisk.sys [26112 2015-10-30] (Microsoft Corporation)
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [377696 2015-10-30] (Microsoft Corporation)
S3 FsDepends; C:\Windows\System32\drivers\FsDepends.sys [62816 2015-10-30] (Microsoft Corporation)
U0 Fs_Rec; C:\Windows\System32\Drivers\Fs_Rec.sys [31584 2015-10-30] (Microsoft Corporation)
R0 fvevol; C:\Windows\System32\DRIVERS\fvevol.sys [638304 2015-10-30] (Microsoft Corporation)
S0 gagp30kx; C:\Windows\System32\drivers\gagp30kx.sys [66912 2015-10-30] (Microsoft Corporation)
R3 GEARAspiWDM; C:\Windows\System32\DRIVERS\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.)
S3 gencounter; C:\Windows\System32\drivers\vmgencounter.sys [13312 2015-10-30] (Microsoft Corporation)
S3 genericusbfn; C:\Windows\System32\drivers\genericusbfn.sys [20992 2015-10-30] (Microsoft Corporation)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41032 2013-05-23] (ThreatTrack Security)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2012-12-08] (GFI Software)
S3 GPIOClx0101; C:\Windows\System32\Drivers\msgpioclx.sys [163680 2015-10-30] (Microsoft Corporation)
R1 GpuEnergyDrv; C:\Windows\System32\drivers\gpuenergydrv.sys [8192 2015-10-30] (Microsoft Corporation)
R3 HDAudBus; C:\Windows\System32\drivers\HDAudBus.sys [79872 2015-10-30] (Microsoft Corporation)
S3 HidBatt; C:\Windows\System32\drivers\HidBatt.sys [28160 2015-10-30] (Microsoft Corporation)
S3 HidBth; C:\Windows\System32\drivers\hidbth.sys [107520 2015-10-30] (Microsoft Corporation)
S3 hidi2c; C:\Windows\System32\drivers\hidi2c.sys [51200 2015-10-30] (Microsoft Corporation)
S3 hidinterrupt; C:\Windows\System32\drivers\hidinterrupt.sys [50016 2015-10-30] (Microsoft Corporation)
S3 HidIr; C:\Windows\System32\drivers\hidir.sys [46592 2015-10-30] (Microsoft Corporation)
R3 HidUsb; C:\Windows\System32\drivers\hidusb.sys [38400 2015-10-30] (Microsoft Corporation)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [43664 2014-12-21] ()
S0 HpSAMD; C:\Windows\System32\drivers\HpSAMD.sys [64352 2015-10-30] (Hewlett-Packard Company)
R3 HTTP; C:\Windows\System32\drivers\HTTP.sys [1089888 2015-10-30] (Microsoft Corporation)
S0 hwpolicy; C:\Windows\System32\drivers\hwpolicy.sys [29024 2015-10-30] (Microsoft Corporation)
S3 hyperkbd; C:\Windows\System32\drivers\hyperkbd.sys [16896 2015-10-30] (Microsoft Corporation)
S3 i8042prt; C:\Windows\System32\drivers\i8042prt.sys [114688 2015-10-30] (Microsoft Corporation)
S3 iai2c; C:\Windows\System32\drivers\iai2c.sys [81408 2015-10-30] (Intel(R) Corporation)
S3 iaLPSS2i_I2C; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [165888 2015-10-30] (Intel Corporation)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [38128 2015-10-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [113152 2015-10-30] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [673120 2015-10-30] (Intel Corporation)
S0 iaStorV; C:\Windows\System32\drivers\iaStorV.sys [412000 2015-10-30] (Intel Corporation)
S3 ibbus; C:\Windows\System32\drivers\ibbus.sys [424800 2015-10-30] (Mellanox)
R3 IntcAzAudAddService; C:\Windows\system32\drivers\RTKVHD64.sys [4496600 2015-06-18] (Realtek Semiconductor Corp.)
S0 intelide; C:\Windows\System32\drivers\intelide.sys [19808 2015-10-30] (Microsoft Corporation)
S0 intelpep; C:\Windows\System32\drivers\intelpep.sys [46432 2015-10-30] (Microsoft Corporation)
S3 intelppm; C:\Windows\System32\drivers\intelppm.sys [133632 2015-10-30] (Microsoft Corporation)
S3 IoQos; C:\Windows\System32\drivers\ioqos.sys [26624 2015-10-30] (Microsoft Corporation)
S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [85504 2015-10-30] (Microsoft Corporation)
S3 IPMIDRV; C:\Windows\System32\drivers\IPMIDrv.sys [81408 2015-10-30] (Microsoft Corporation)
S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [143360 2015-10-30] (Microsoft Corporation)
S3 IRENUM; C:\Windows\System32\drivers\irenum.sys [19456 2015-10-30] (Microsoft Corporation)
S0 isapnp; C:\Windows\System32\drivers\isapnp.sys [22880 2015-10-30] (Microsoft Corporation)
S3 iScsiPrt; C:\Windows\System32\drivers\msiscsi.sys [277344 2015-10-30] (Microsoft Corporation)
R3 kbdclass; C:\Windows\System32\drivers\kbdclass.sys [62304 2015-10-30] (Microsoft Corporation)
R3 kbdhid; C:\Windows\System32\drivers\kbdhid.sys [36864 2015-10-30] (Microsoft Corporation)
R3 kdnic; C:\Windows\System32\drivers\kdnic.sys [23040 2015-10-30] (Microsoft Corporation)
R0 KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [129888 2015-10-30] (Microsoft Corporation)
R0 KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [161632 2015-12-16] (Microsoft Corporation)
R3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [26112 2015-10-30] (Microsoft Corporation)
R2 lltdio; C:\Windows\System32\drivers\lltdio.sys [64000 2015-10-30] (Microsoft Corporation)
S0 LSI_SAS; C:\Windows\System32\drivers\lsi_sas.sys [108888 2015-10-30] (LSI Corporation)
S0 LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [104800 2015-10-30] (LSI Corporation)
S0 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [99168 2015-10-30] (Avago Technologies)
S0 LSI_SSS; C:\Windows\System32\drivers\lsi_sss.sys [82784 2015-10-30] (LSI Corporation)
R2 luafv; C:\Windows\system32\drivers\luafv.sys [126464 2015-10-30] (Microsoft Corporation)
R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
R3 lvrs64; C:\Windows\system32\DRIVERS\lvrs64.sys [351520 2012-10-26] (Logitech Inc.)
R3 LVUVC64; C:\Windows\system32\DRIVERS\lvuvc64.sys [4758176 2012-10-26] (Logitech Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
S0 megasas; C:\Windows\System32\drivers\megasas.sys [59744 2015-10-30] (Avago Technologies)
S0 megasr; C:\Windows\System32\drivers\megasr.sys [575840 2015-10-30] (LSI Corporation, Inc.)
S3 mlx4_bus; C:\Windows\System32\drivers\mlx4_bus.sys [705376 2015-10-30] (Mellanox)
R2 MMCSS; C:\Windows\system32\drivers\mmcss.sys [47616 2015-10-30] (Microsoft Corporation)
S3 Modem; C:\Windows\System32\drivers\modem.sys [41984 2015-10-30] (Microsoft Corporation)
R3 monitor; C:\Windows\System32\drivers\monitor.sys [38400 2015-10-30] (Microsoft Corporation)
R3 mouclass; C:\Windows\System32\drivers\mouclass.sys [59232 2015-10-30] (Microsoft Corporation)
R3 mouhid; C:\Windows\System32\drivers\mouhid.sys [32256 2015-10-30] (Microsoft Corporation)
R0 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [102752 2015-10-30] (Microsoft Corporation)
R3 mpsdrv; C:\Windows\System32\drivers\mpsdrv.sys [76288 2015-10-30] (Microsoft Corporation)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [175616 2015-12-16] (Microsoft Corporation)
S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [144384 2015-10-30] (Microsoft Corporation)
R3 mrxsmb; C:\Windows\System32\DRIVERS\mrxsmb.sys [430944 2015-10-30] (Microsoft Corporation)
R2 mrxsmb10; C:\Windows\System32\DRIVERS\mrxsmb10.sys [285696 2015-10-30] (Microsoft Corporation)
R3 mrxsmb20; C:\Windows\System32\DRIVERS\mrxsmb20.sys [216408 2015-10-30] (Microsoft Corporation)
S3 MsBridge; C:\Windows\System32\drivers\bridge.sys [114688 2015-10-30] (Microsoft Corporation)
R1 Msfs; C:\Windows\System32\Drivers\Msfs.sys [31232 2015-10-30] (Microsoft Corporation)
S3 msgpiowin32; C:\Windows\System32\drivers\msgpiowin32.sys [46944 2015-10-30] (Microsoft Corporation)
S3 mshidkmdf; C:\Windows\System32\drivers\mshidkmdf.sys [8704 2015-10-30] (Microsoft Corporation)
S3 mshidumdf; C:\Windows\System32\drivers\mshidumdf.sys [11776 2015-10-30] (Microsoft Corporation)
R0 msisadrv; C:\Windows\System32\drivers\msisadrv.sys [18784 2015-10-30] (Microsoft Corporation)
S3 MSKSSRV; C:\Windows\system32\DRIVERS\MSKSSRV.sys [13824 2015-10-30] (Microsoft Corporation)
R2 MsLldp; C:\Windows\System32\drivers\mslldp.sys [81920 2015-10-30] (Microsoft Corporation)
S3 MSPCLOCK; C:\Windows\system32\DRIVERS\MSPCLOCK.sys [10752 2015-10-30] (Microsoft Corporation)
S3 MSPQM; C:\Windows\system32\DRIVERS\MSPQM.sys [10752 2015-10-30] (Microsoft Corporation)
S3 MsRPC; C:\Windows\System32\Drivers\MsRPC.sys [354144 2015-10-30] (Microsoft Corporation)
R1 mssmbios; C:\Windows\System32\drivers\mssmbios.sys [43872 2015-10-30] (Microsoft Corporation)
S3 MSTEE; C:\Windows\system32\DRIVERS\MSTEE.sys [12800 2015-10-30] (Microsoft Corporation)
S3 MTConfig; C:\Windows\System32\drivers\MTConfig.sys [15872 2015-10-30] (Microsoft Corporation)
R0 Mup; C:\Windows\System32\Drivers\mup.sys [124248 2015-10-30] (Microsoft Corporation)
S0 mvumis; C:\Windows\System32\drivers\mvumis.sys [63840 2015-10-30] (Marvell Semiconductor, Inc.)
R3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [530432 2015-10-30] (Microsoft Corporation)
S3 ndfltr; C:\Windows\System32\drivers\ndfltr.sys [76128 2015-10-30] (Mellanox)
R0 NDIS; C:\Windows\System32\drivers\ndis.sys [1152864 2015-10-30] (Microsoft Corporation)
S3 NdisCap; C:\Windows\System32\drivers\ndiscap.sys [50176 2015-10-30] (Microsoft Corporation)
S3 NdisImPlatform; C:\Windows\System32\drivers\NdisImPlatform.sys [126976 2015-10-30] (Microsoft Corporation)
S3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [25600 2015-10-30] (Microsoft Corporation)
R3 Ndisuio; C:\Windows\System32\drivers\ndisuio.sys [63488 2015-10-30] (Microsoft Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [20480 2015-10-30] (Microsoft Corporation)
S3 NdisWan; C:\Windows\System32\drivers\ndiswan.sys [188928 2015-10-30] (Microsoft Corporation)
S3 ndiswanlegacy; C:\Windows\System32\DRIVERS\ndiswan.sys [188928 2015-10-30] (Microsoft Corporation)
S3 ndproxy; C:\Windows\System32\DRIVERS\NDProxy.sys [60928 2015-10-30] (Microsoft Corporation)
R2 Ndu; C:\Windows\System32\drivers\Ndu.sys [124928 2015-10-30] (Microsoft Corporation)
R1 NetBIOS; C:\Windows\System32\drivers\netbios.sys [57184 2015-10-30] (Microsoft Corporation)
R1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [279552 2015-10-30] (Microsoft Corporation)
R2 NPF; C:\Windows\system32\drivers\npf.sys [35344 2014-10-11] (CACE Technologies, Inc.)
R1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [68608 2015-10-30] (Microsoft Corporation)
R1 npsvctrig; C:\Windows\System32\drivers\npsvctrig.sys [26624 2015-10-30] (Microsoft Corporation)
R1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [40960 2015-10-30] (Microsoft Corporation)
R3 NTFS; C:\Windows\System32\Drivers\NTFS.sys [2152800 2015-12-16] (Microsoft Corporation)
R1 Null; C:\Windows\System32\Drivers\Null.sys [7168 2015-10-30] (Microsoft Corporation)
S0 nvraid; C:\Windows\System32\drivers\nvraid.sys [150368 2015-10-30] (NVIDIA Corporation)
S0 nvstor; C:\Windows\System32\drivers\nvstor.sys [166240 2015-10-30] (NVIDIA Corporation)
S0 nv_agp; C:\Windows\System32\drivers\nv_agp.sys [126304 2015-10-30] (Microsoft Corporation)
S3 Parport; C:\Windows\System32\drivers\parport.sys [96768 2015-10-30] (Microsoft Corporation)
R0 partmgr; C:\Windows\System32\drivers\partmgr.sys [118624 2015-10-30] (Microsoft Corporation)
R0 pci; C:\Windows\System32\drivers\pci.sys [330080 2015-10-30] (Microsoft Corporation)
R0 pciide; C:\Windows\System32\drivers\pciide.sys [16224 2015-10-30] (Microsoft Corporation)
S0 pcmcia; C:\Windows\System32\drivers\pcmcia.sys [118112 2015-10-30] (Microsoft Corporation)
R0 pcw; C:\Windows\System32\drivers\pcw.sys [51544 2015-10-30] (Microsoft Corporation)
R0 pdc; C:\Windows\System32\drivers\pdc.sys [99680 2015-10-30] (Microsoft Corporation)
R2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [721408 2015-10-30] (Microsoft Corporation)
S0 percsas2i; C:\Windows\System32\drivers\percsas2i.sys [58208 2015-10-30] (LSI Corporation)
S0 percsas3i; C:\Windows\System32\drivers\percsas3i.sys [58720 2015-10-30] (Avago Technologies)
S3 PptpMiniport; C:\Windows\System32\drivers\raspptp.sys [95744 2015-10-30] (Microsoft Corporation)
S3 Processor; C:\Windows\System32\drivers\processr.sys [118272 2015-10-30] (Microsoft Corporation)
R1 Psched; C:\Windows\System32\drivers\pacer.sys [160608 2015-10-30] (Microsoft Corporation)
S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [48640 2015-10-30] (Microsoft Corporation)
S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [17408 2015-10-30] (Microsoft Corporation)
S3 RasAgileVpn; C:\Windows\System32\drivers\AgileVpn.sys [105472 2015-10-30] (Microsoft Corporation)
S3 Rasl2tp; C:\Windows\System32\drivers\rasl2tp.sys [104960 2015-10-30] (Microsoft Corporation)
S3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [81408 2015-10-30] (Microsoft Corporation)
S3 RasSstp; C:\Windows\System32\drivers\rassstp.sys [78336 2015-10-30] (Microsoft Corporation)
R1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [422752 2015-10-30] (Microsoft Corporation)
R3 rdpbus; C:\Windows\System32\drivers\rdpbus.sys [26112 2015-10-30] (Microsoft Corporation)
S3 RDPDR; C:\Windows\System32\drivers\rdpdr.sys [173056 2015-10-30] (Microsoft Corporation)
S3 RdpVideoMiniport; C:\Windows\System32\drivers\rdpvideominiport.sys [29536 2015-10-30] (Microsoft Corporation)
R0 rdyboost; C:\Windows\System32\drivers\rdyboost.sys [236384 2015-10-30] (Microsoft Corporation)
S3 ReFSv1; C:\Windows\System32\Drivers\ReFSv1.sys [930656 2015-10-30] (Microsoft Corporation)
R2 rspndr; C:\Windows\System32\drivers\rspndr.sys [80896 2015-10-30] (Microsoft Corporation)
R3 rtl819xp; C:\Windows\System32\drivers\rtl819xp.sys [620032 2015-10-30] (Realtek Semiconductor Corporation )
S3 s3cap; C:\Windows\System32\drivers\vms3cap.sys [8704 2015-10-30] (Microsoft Corporation)
S3 SBFWIMCL; C:\Windows\System32\DRIVERS\sbfwim.sys [119416 2011-09-29] (GFI Software)
S3 SBFWIMCLMP; C:\Windows\System32\DRIVERS\SBFWIM.sys [119416 2011-09-29] (GFI Software)
S0 sbp2port; C:\Windows\System32\drivers\sbp2port.sys [110432 2015-10-30] (Microsoft Corporation)
S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [43008 2015-10-30] (Microsoft Corporation)
S3 sdbus; C:\Windows\System32\drivers\sdbus.sys [277856 2015-10-30] (Microsoft Corporation)
S3 sdstor; C:\Windows\System32\drivers\sdstor.sys [95072 2015-12-16] (Microsoft Corporation)
S3 SerCx; C:\Windows\System32\drivers\SerCx.sys [74584 2015-10-30] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [155488 2015-10-30] (Microsoft Corporation)
S3 Serenum; C:\Windows\System32\drivers\serenum.sys [25088 2015-10-30] (Microsoft Corporation)
S3 Serial; C:\Windows\System32\drivers\serial.sys [83968 2015-10-30] (Microsoft Corporation)
S3 sermouse; C:\Windows\System32\drivers\sermouse.sys [27648 2015-10-30] (Microsoft Corporation)
S3 sfloppy; C:\Windows\System32\drivers\sfloppy.sys [18432 2015-10-30] (Microsoft Corporation)
S0 SiSRaid2; C:\Windows\System32\drivers\SiSRaid2.sys [44896 2015-10-30] (Silicon Integrated Systems Corp.)
S0 SiSRaid4; C:\Windows\System32\drivers\sisraid4.sys [81760 2015-10-30] (Silicon Integrated Systems)
R0 spaceport; C:\Windows\System32\drivers\spaceport.sys [532832 2015-10-30] (Microsoft Corporation)
S3 SpbCx; C:\Windows\System32\drivers\SpbCx.sys [77664 2015-10-30] (Microsoft Corporation)
R2 srv; C:\Windows\System32\DRIVERS\srv.sys [407552 2015-10-30] (Microsoft Corporation)
R3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [690688 2015-10-30] (Microsoft Corporation)
R3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [235520 2015-10-30] (Microsoft Corporation)
S0 stexstor; C:\Windows\System32\drivers\stexstor.sys [31072 2015-10-30] (Promise Technology, Inc.)
R3 StillCam; C:\Windows\system32\DRIVERS\serscan.sys [12800 2015-10-30] (Microsoft Corporation)
S0 storahci; C:\Windows\System32\drivers\storahci.sys [133984 2015-10-30] (Microsoft Corporation)
S0 storflt; C:\Windows\System32\drivers\vmstorfl.sys [46944 2015-10-30] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [79200 2015-10-30] (Microsoft Corporation)
R2 storqosflt; C:\Windows\System32\drivers\storqosflt.sys [78848 2015-10-30] (Microsoft Corporation)
S0 storufs; C:\Windows\System32\drivers\storufs.sys [34144 2015-10-30] (Microsoft Corporation)
S0 storvsc; C:\Windows\System32\drivers\storvsc.sys [36192 2015-10-30] (Microsoft Corporation)
R3 swenum; C:\Windows\System32\drivers\swenum.sys [17760 2015-10-30] (Microsoft Corporation)
S3 Synth3dVsc; C:\Windows\System32\drivers\Synth3dVsc.sys [64000 2015-10-30] (Microsoft Corporation)
R0 Tcpip; C:\Windows\System32\drivers\tcpip.sys [2403680 2015-10-30] (Microsoft Corporation)
S3 Tcpip6; C:\Windows\System32\drivers\tcpip.sys [2403680 2015-10-30] (Microsoft Corporation)
R2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [52224 2015-10-30] (Microsoft Corporation)
R1 tdx; C:\Windows\system32\DRIVERS\tdx.sys [118624 2015-12-16] (Microsoft Corporation)
S3 terminpt; C:\Windows\System32\drivers\terminpt.sys [38752 2015-10-30] (Microsoft Corporation)
S3 TPM; C:\Windows\System32\drivers\tpm.sys [209760 2015-10-30] (Microsoft Corporation)
S3 tsusbflt; C:\Windows\System32\drivers\TsUsbFlt.sys [61952 2015-10-30] (Microsoft Corporation)
S3 TsUsbGD; C:\Windows\System32\drivers\TsUsbGD.sys [33280 2015-10-30] (Microsoft Corporation)
R3 tunnel; C:\Windows\System32\drivers\tunnel.sys [153600 2015-10-30] (Microsoft Corporation)
S0 uagp35; C:\Windows\System32\drivers\uagp35.sys [66400 2015-10-30] (Microsoft Corporation)
S3 UASPStor; C:\Windows\System32\drivers\uaspstor.sys [77664 2015-10-30] (Microsoft Corporation)
S3 UcmCx0101; C:\Windows\System32\Drivers\UcmCx.sys [61952 2015-10-30] (Microsoft Corporation)
S3 UcmUcsi; C:\Windows\System32\drivers\UcmUcsi.sys [46592 2015-10-30] (Microsoft Corporation)
S3 Ucx01000; C:\Windows\System32\drivers\ucx01000.sys [209248 2015-10-30] (Microsoft Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [45056 2015-10-30] (Microsoft Corporation)
S4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [321024 2015-10-30] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [28512 2015-10-30] (Microsoft Corporation)
S3 Ufx01000; C:\Windows\System32\drivers\ufx01000.sys [254816 2015-10-30] (Microsoft Corporation)
S3 UfxChipidea; C:\Windows\System32\drivers\UfxChipidea.sys [94048 2015-10-30] (Microsoft Corporation)
S3 ufxsynopsys; C:\Windows\System32\drivers\ufxsynopsys.sys [131424 2015-10-30] (Microsoft Corporation)
S0 uliagpkx; C:\Windows\System32\drivers\uliagpkx.sys [66912 2015-10-30] (Microsoft Corporation)
R3 umbus; C:\Windows\System32\drivers\umbus.sys [56832 2015-10-30] (Microsoft Corporation)
S3 UmPass; C:\Windows\System32\drivers\umpass.sys [13824 2015-10-30] (Microsoft Corporation)
S3 UrsChipidea; C:\Windows\System32\drivers\urschipidea.sys [28512 2015-10-30] (Microsoft Corporation)
S3 UrsCx01000; C:\Windows\System32\drivers\urscx01000.sys [57696 2015-10-30] (Microsoft Corporation)
S3 UrsSynopsys; C:\Windows\System32\drivers\urssynopsys.sys [27488 2015-10-30] (Microsoft Corporation)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-10] (Apple, Inc.) [File not signed]
R3 usbaudio; C:\Windows\system32\drivers\usbaudio.sys [131584 2015-10-30] (Microsoft Corporation)
R3 usbccgp; C:\Windows\System32\drivers\usbccgp.sys [159072 2015-10-30] (Microsoft Corporation)
S3 usbcir; C:\Windows\System32\drivers\usbcir.sys [102400 2015-10-30] (Microsoft Corporation)
R3 usbehci; C:\Windows\System32\drivers\usbehci.sys [95584 2015-10-30] (Microsoft Corporation)
R3 usbhub; C:\Windows\System32\drivers\usbhub.sys [500064 2015-10-30] (Microsoft Corporation)
S3 USBHUB3; C:\Windows\System32\drivers\UsbHub3.sys [534368 2015-10-30] (Microsoft Corporation)
R3 usbohci; C:\Windows\System32\drivers\usbohci.sys [29696 2015-10-30] (Microsoft Corporation)
S3 usbprint; C:\Windows\System32\drivers\usbprint.sys [27648 2015-10-30] (Microsoft Corporation)
S3 usbscan; C:\Windows\System32\drivers\usbscan.sys [46080 2015-10-30] (Microsoft Corporation)
S3 usbser; C:\Windows\System32\drivers\usbser.sys [67072 2015-10-30] (Microsoft Corporation)
R3 USBSTOR; C:\Windows\System32\drivers\USBSTOR.SYS [127840 2015-10-30] (Microsoft Corporation)
S3 usbuhci; C:\Windows\System32\drivers\usbuhci.sys [35328 2015-10-30] (Microsoft Corporation)
S3 USBXHCI; C:\Windows\System32\drivers\USBXHCI.SYS [378208 2015-10-30] (Microsoft Corporation)
R0 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [52576 2015-10-30] (Microsoft Corporation)
S3 VerifierExt; C:\Windows\System32\drivers\VerifierExt.sys [200536 2015-10-30] (Microsoft Corporation)
S3 vhdmp; C:\Windows\System32\drivers\vhdmp.sys [707424 2015-10-30] (Microsoft Corporation)
S3 vhf; C:\Windows\System32\drivers\vhf.sys [31744 2015-10-30] (Microsoft Corporation)
S0 vmbus; C:\Windows\System32\drivers\vmbus.sys [99672 2015-10-30] (Microsoft Corporation)
S3 VMBusHID; C:\Windows\System32\drivers\VMBusHID.sys [25088 2015-10-30] (Microsoft Corporation)
R0 volmgr; C:\Windows\System32\drivers\volmgr.sys [81248 2015-10-30] (Microsoft Corporation)
R0 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [367968 2015-10-30] (Microsoft Corporation)
R0 volsnap; C:\Windows\System32\drivers\volsnap.sys [414560 2015-10-30] (Microsoft Corporation)
S3 vpci; C:\Windows\System32\drivers\vpci.sys [74080 2015-10-30] (Microsoft Corporation)
S0 vsmraid; C:\Windows\System32\drivers\vsmraid.sys [166752 2015-10-30] (VIA Technologies Inc.,Ltd)
S0 VSTXRAID; C:\Windows\System32\drivers\vstxraid.sys [305504 2015-10-30] (VIA Corporation)
R3 vwifibus; C:\Windows\System32\drivers\vwifibus.sys [26624 2015-10-30] (Microsoft Corporation)
R1 vwififlt; C:\Windows\System32\drivers\vwififlt.sys [74240 2015-10-30] (Microsoft Corporation)
R3 vwifimp; C:\Windows\System32\drivers\vwifimp.sys [39936 2015-10-30] (Microsoft Corporation)
S3 WacomPen; C:\Windows\System32\drivers\wacompen.sys [30208 2015-10-30] (Microsoft Corporation)
R2 wanarp; C:\Windows\System32\DRIVERS\wanarp.sys [79872 2015-10-30] (Microsoft Corporation)
S3 wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [79872 2015-10-30] (Microsoft Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 Wdf01000; C:\Windows\System32\drivers\Wdf01000.sys [794432 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 wdiwifi; C:\Windows\System32\DRIVERS\wdiwifi.sys [694784 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R0 WFPLWFS; C:\Windows\System32\drivers\wfplwfs.sys [154464 2015-10-30] (Microsoft Corporation)
S3 WIMMount; C:\Windows\System32\drivers\wimmount.sys [35680 2015-12-16] (Microsoft Corporation)
R0 WindowsTrustedRT; C:\Windows\System32\drivers\WindowsTrustedRT.sys [106520 2015-10-30] (Microsoft Corporation)
R0 WindowsTrustedRTProxy; C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys [17944 2015-10-30] (Microsoft Corporation)
S3 WinMad; C:\Windows\System32\drivers\winmad.sys [26976 2015-10-30] (Mellanox)
S3 WINUSB; C:\Windows\System32\drivers\WinUSB.SYS [89088 2015-10-30] (Microsoft Corporation)
S3 WinVerbs; C:\Windows\System32\drivers\winverbs.sys [59232 2015-10-30] (Mellanox)
R3 WmiAcpi; C:\Windows\System32\drivers\wmiacpi.sys [18432 2015-10-30] (Microsoft Corporation)
R0 Wof; C:\Windows\System32\Drivers\Wof.sys [199008 2015-10-30] (Microsoft Corporation)
S3 wpcfltr; C:\Windows\System32\DRIVERS\wpcfltr.sys [52768 2015-10-30] (Microsoft Corporation)
R3 WpdUpFltr; C:\Windows\System32\drivers\WpdUpFltr.sys [30560 2015-10-30] (Microsoft Corporation)
S4 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [22528 2015-10-30] (Microsoft Corporation)
S3 WSDPrintDevice; C:\Windows\System32\drivers\WSDPrint.sys [22528 2015-10-30] (Microsoft Corporation)
S3 WSDScan; C:\Windows\system32\DRIVERS\WSDScan.sys [24576 2015-10-30] (Microsoft Corporation)
R3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [98816 2015-10-30] (Microsoft Corporation)
R3 WUDFRd; C:\Windows\System32\drivers\WudfRd.sys [216064 2015-10-30] (Microsoft Corporation)
R3 WUDFWpdFs; C:\Windows\system32\DRIVERS\WUDFRd.sys [216064 2015-10-30] (Microsoft Corporation)
S3 xboxgip; C:\Windows\System32\drivers\xboxgip.sys [238592 2015-10-30] (Microsoft Corporation)
S3 xinputhid; C:\Windows\System32\drivers\xinputhid.sys [26112 2015-10-30] (Microsoft Corporation)
R3 yukonw8; C:\Windows\System32\drivers\yk63x64.sys [288768 2015-10-30] (Marvell)
U3 idsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
huskyrog
Active Member
 
Posts: 7
Joined: December 26th, 2015, 2:29 pm

Re: FaceBook reward wheel, spin the lucky wheel will not go

Unread postby huskyrog » December 29th, 2015, 12:19 am

================= One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-28 22:51 - 2015-12-28 22:52 - 02370560 _____ (Farbar) C:\Users\Owner\Downloads\FRST64.exe
2015-12-28 22:48 - 2015-12-28 22:48 - 00013562 _____ C:\Users\Owner\Desktop\JRT.txt
2015-12-28 22:43 - 2015-12-28 22:43 - 01599336 _____ (Malwarebytes) C:\Users\Owner\Downloads\JRT.exe
2015-12-28 22:37 - 2015-12-28 22:42 - 00029696 ____H C:\Users\Owner\Documents\~WRL0003.tmp
2015-12-28 22:34 - 2015-12-28 22:38 - 00000000 ____D C:\AdwCleaner
2015-12-28 22:33 - 2015-12-28 22:33 - 01743360 _____ C:\Users\Owner\Downloads\adwcleaner_5.026 (1).exe
2015-12-28 22:32 - 2015-12-28 22:32 - 01743360 _____ C:\Users\Owner\Downloads\adwcleaner_5.026.exe
2015-12-28 22:05 - 2015-12-28 22:05 - 00000207 _____ C:\WINDOWS\tweaking.com-regbackup-OWNER-PC-Windows-10-Home-(64-bit).dat
2015-12-28 22:05 - 2015-12-28 22:05 - 00000000 ____D C:\RegBackup
2015-12-28 21:18 - 2015-12-28 22:02 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2015-12-28 21:15 - 2015-12-28 21:15 - 00003768 _____ C:\WINDOWS\System32\Tasks\Tweaking.com - Windows Repair Tray Icon
2015-12-28 21:15 - 2015-12-28 21:15 - 00002243 _____ C:\Users\Owner\Desktop\Tweaking.com - Windows Repair.lnk
2015-12-28 21:15 - 2015-12-28 21:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2015-12-28 21:15 - 2015-12-28 21:15 - 00000000 ____D C:\Program Files (x86)\Tweaking.com
2015-12-28 21:14 - 2015-12-28 21:15 - 00183458 _____ C:\WINDOWS\Tweaking.com - Windows Repair Setup Log.txt
2015-12-28 21:14 - 2015-12-28 21:14 - 21102368 _____ (Tweaking.com) C:\Users\Owner\Downloads\tweaking.com_windows_repair_aio_setup.exe
2015-12-26 13:58 - 2015-12-28 22:54 - 00099441 _____ C:\Users\Owner\Downloads\FRST.txt
2015-12-26 13:35 - 2015-12-26 13:58 - 00060188 _____ C:\Users\Owner\Downloads\Addition.txt
2015-12-26 13:34 - 2015-12-28 22:54 - 00000000 ____D C:\FRST
2015-12-24 20:35 - 2015-12-24 20:35 - 00002640 _____ C:\Users\Public\Desktop\Skype.lnk
2015-12-24 20:35 - 2015-12-24 20:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-23 08:21 - 2015-12-23 08:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2015-12-18 05:52 - 2015-12-06 23:57 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-12-18 05:52 - 2015-12-06 23:55 - 01281376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-18 05:52 - 2015-12-06 23:48 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-18 05:52 - 2015-12-06 23:48 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-12-18 05:52 - 2015-12-06 23:48 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2015-12-18 05:52 - 2015-12-06 23:48 - 01155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2015-12-18 05:52 - 2015-12-06 23:48 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2015-12-18 05:52 - 2015-12-06 23:48 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2015-12-18 05:52 - 2015-12-06 23:48 - 00823264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-12-18 05:52 - 2015-12-06 23:47 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-12-18 05:52 - 2015-12-06 23:46 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-18 05:52 - 2015-12-06 23:46 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-18 05:52 - 2015-12-06 23:10 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2015-12-18 05:52 - 2015-12-06 23:07 - 16984064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-18 05:52 - 2015-12-06 23:03 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-18 05:52 - 2015-12-06 22:58 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-18 05:52 - 2015-12-06 22:53 - 19339264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-18 05:52 - 2015-12-06 22:47 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-12-18 05:52 - 2015-12-06 22:45 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-18 05:52 - 2015-12-06 22:43 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-18 05:52 - 2015-12-06 22:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-18 05:52 - 2015-12-06 22:40 - 01995776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-18 05:52 - 2015-12-06 22:40 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-18 05:51 - 2015-12-06 23:49 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2015-12-18 05:51 - 2015-12-06 23:48 - 01092456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 01065080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 01020096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 00526856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 00337840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2015-12-18 05:51 - 2015-12-06 23:48 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2015-12-18 05:51 - 2015-12-06 23:47 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-12-18 05:51 - 2015-12-06 23:47 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2015-12-18 05:51 - 2015-12-06 23:47 - 00116720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-12-18 05:51 - 2015-12-06 23:45 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-12-18 05:51 - 2015-12-06 23:15 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2015-12-18 05:51 - 2015-12-06 23:15 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-12-18 05:51 - 2015-12-06 23:09 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2015-12-18 05:51 - 2015-12-06 23:09 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2015-12-18 05:51 - 2015-12-06 23:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2015-12-18 05:51 - 2015-12-06 23:07 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2015-12-18 05:51 - 2015-12-06 23:07 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-18 05:51 - 2015-12-06 23:06 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2015-12-18 05:51 - 2015-12-06 23:06 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-18 05:51 - 2015-12-06 23:06 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-18 05:51 - 2015-12-06 23:05 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-18 05:51 - 2015-12-06 23:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2015-12-18 05:51 - 2015-12-06 23:04 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-18 05:51 - 2015-12-06 23:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-18 05:51 - 2015-12-06 23:02 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-18 05:51 - 2015-12-06 23:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-12-18 05:51 - 2015-12-06 23:01 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-18 05:51 - 2015-12-06 23:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
2015-12-18 05:51 - 2015-12-06 23:00 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2015-12-18 05:51 - 2015-12-06 23:00 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2015-12-18 05:51 - 2015-12-06 23:00 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-18 05:51 - 2015-12-06 23:00 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2015-12-18 05:51 - 2015-12-06 22:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-18 05:51 - 2015-12-06 22:59 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-18 05:51 - 2015-12-06 22:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-18 05:51 - 2015-12-06 22:59 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-18 05:51 - 2015-12-06 22:58 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-18 05:51 - 2015-12-06 22:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-12-18 05:51 - 2015-12-06 22:57 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2015-12-18 05:51 - 2015-12-06 22:57 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2015-12-18 05:51 - 2015-12-06 22:56 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-18 05:51 - 2015-12-06 22:56 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-18 05:51 - 2015-12-06 22:55 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-18 05:51 - 2015-12-06 22:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-12-18 05:51 - 2015-12-06 22:54 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-18 05:51 - 2015-12-06 22:54 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2015-12-18 05:51 - 2015-12-06 22:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-12-18 05:51 - 2015-12-06 22:51 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-12-18 05:51 - 2015-12-06 22:51 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2015-12-18 05:51 - 2015-12-06 22:50 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2015-12-18 05:51 - 2015-12-06 22:49 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2015-12-18 05:51 - 2015-12-06 22:48 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-12-18 05:51 - 2015-12-06 22:45 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2015-12-18 05:51 - 2015-12-06 22:45 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2015-12-18 05:51 - 2015-12-06 22:44 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-12-18 05:51 - 2015-12-06 22:43 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2015-12-18 05:51 - 2015-12-06 22:40 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-18 05:51 - 2015-12-06 22:39 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-12-18 05:51 - 2015-12-06 22:38 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2015-12-18 05:51 - 2015-12-06 22:33 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2015-12-18 05:51 - 2015-12-06 22:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2015-12-18 05:50 - 2015-12-18 05:50 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2015-12-17 22:48 - 2015-12-27 00:51 - 00003148 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1450410503
2015-12-17 22:48 - 2015-12-27 00:51 - 00001095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2015-12-17 22:48 - 2015-12-17 22:48 - 00001089 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2015-12-17 22:41 - 2015-12-17 22:41 - 00466400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdisFlt.sys
2015-12-17 22:41 - 2015-12-17 22:41 - 00386096 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-12-17 22:41 - 2015-12-17 22:41 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-12-17 22:37 - 2015-12-17 22:37 - 00002343 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-17 22:37 - 2015-12-17 22:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-17 20:15 - 2015-12-17 20:15 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-12-16 05:48 - 2015-12-16 06:00 - 00000000 ___DC C:\WINDOWS\Panther
2015-12-16 05:45 - 2015-12-16 05:46 - 00000000 ____D C:\Windows.old
2015-12-16 05:44 - 2015-12-16 05:44 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-12-16 05:44 - 2015-12-16 05:44 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-12-16 05:44 - 2015-12-16 05:44 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-12-16 05:44 - 2015-12-16 05:44 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-12-16 05:44 - 2015-12-16 05:44 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-12-16 05:44 - 2015-12-16 05:44 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-16 05:44 - 2015-12-16 05:44 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00795840 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-12-16 05:44 - 2015-12-16 05:44 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-12-16 05:44 - 2015-12-16 05:44 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-12-16 05:44 - 2015-12-16 05:44 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-12-16 05:44 - 2015-12-16 05:44 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-12-16 05:44 - 2015-12-16 05:44 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-16 05:44 - 2015-12-16 05:44 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-12-16 05:44 - 2015-12-16 05:44 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2015-12-16 05:44 - 2015-12-16 05:44 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-12-16 05:44 - 2015-12-16 05:44 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2015-12-16 05:44 - 2015-12-16 05:44 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2015-12-16 05:44 - 2015-12-16 05:44 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-12-16 05:44 - 2015-12-16 05:44 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-12-16 05:41 - 2015-12-16 05:41 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-12-16 05:38 - 2015-12-16 05:38 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2015-12-16 05:38 - 2015-12-16 05:38 - 00000000 ____D C:\WINDOWS\system32\msmq
2015-12-16 05:38 - 2015-12-16 05:38 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2015-12-16 05:38 - 2015-12-16 05:38 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-12-16 05:38 - 2015-12-16 05:38 - 00000000 ____D C:\Program Files\MSBuild
2015-12-16 05:38 - 2015-12-16 05:38 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-12-16 05:38 - 2015-12-16 05:38 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-12-16 05:38 - 2015-12-16 05:38 - 00000000 ____D C:\inetpub
2015-12-16 05:37 - 2015-10-23 20:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-12-16 05:37 - 2015-10-23 20:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-12-16 05:37 - 2015-10-23 20:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-12-16 05:37 - 2015-10-23 20:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-12-16 05:37 - 2015-10-23 20:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-12-16 05:37 - 2015-10-23 20:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-12-16 03:30 - 2015-12-16 03:30 - 00000000 ____D C:\Users\Owner\AppData\Local\ActiveSync
2015-12-16 03:27 - 2015-12-16 03:27 - 00000020 ___SH C:\Users\Owner\ntuser.ini
2015-12-16 03:27 - 2015-12-16 03:27 - 00000000 _SHDL C:\Users\Default\My Documents
2015-12-16 03:27 - 2015-12-16 03:27 - 00000000 _SHDL C:\Users\Default\Documents\My Videos
2015-12-16 03:27 - 2015-12-16 03:27 - 00000000 _SHDL C:\Users\Default\Documents\My Pictures
2015-12-16 03:27 - 2015-12-16 03:27 - 00000000 _SHDL C:\Users\Default\Documents\My Music
2015-12-16 03:27 - 2015-12-16 03:27 - 00000000 _SHDL C:\Users\Default User\Documents\My Videos
2015-12-16 03:27 - 2015-12-16 03:27 - 00000000 _SHDL C:\Users\Default User\Documents\My Pictures
2015-12-16 03:27 - 2015-12-16 03:27 - 00000000 _SHDL C:\Users\Default User\Documents\My Music
2015-12-16 03:21 - 2015-12-28 22:39 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-16 03:10 - 2015-12-16 03:10 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2015-12-16 03:10 - 2015-12-16 03:10 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2015-12-16 03:10 - 2015-12-16 03:10 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer
2015-12-16 03:10 - 2015-12-16 03:10 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-12-16 03:10 - 2015-12-16 03:10 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer
2015-12-16 03:10 - 2015-12-16 03:10 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2015-12-16 03:10 - 2015-12-16 03:10 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2015-12-16 03:10 - 2015-12-16 03:10 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer
2015-12-16 03:10 - 2015-12-16 03:10 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-12-16 03:10 - 2015-12-16 03:10 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer
2015-12-16 03:09 - 2015-12-16 03:09 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-16 03:03 - 2015-12-16 03:03 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2015-12-16 03:02 - 2015-12-16 03:12 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-12-16 02:59 - 2015-12-23 08:22 - 00000000 ____D C:\Users\Owner
2015-12-16 02:59 - 2015-12-18 05:50 - 00000000 ____D C:\Users\DefaultAppPool
2015-12-16 02:59 - 2015-12-16 02:59 - 00000000 _SHDL C:\Users\Owner\My Documents
2015-12-16 02:59 - 2015-12-16 02:59 - 00000000 _SHDL C:\Users\Owner\Documents\My Videos
2015-12-16 02:59 - 2015-12-16 02:59 - 00000000 _SHDL C:\Users\Owner\Documents\My Pictures
2015-12-16 02:59 - 2015-12-16 02:59 - 00000000 _SHDL C:\Users\Owner\Documents\My Music
2015-12-16 02:59 - 2015-12-16 02:59 - 00000000 _SHDL C:\Users\DefaultAppPool\My Documents
2015-12-16 02:59 - 2015-12-16 02:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\My Videos
2015-12-16 02:59 - 2015-12-16 02:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\My Pictures
2015-12-16 02:59 - 2015-12-16 02:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\My Music
2015-12-16 02:58 - 2015-12-28 22:46 - 01009692 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-16 02:58 - 2015-12-16 02:58 - 00965390 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-12-16 02:55 - 2015-12-28 22:39 - 00000000 _____ C:\WINDOWS\system32\Drivers\lvuvc.hs
2015-12-16 02:55 - 2015-12-16 03:12 - 00000000 ____D C:\Program Files\Common Files\logishrd
2015-12-16 02:54 - 2015-12-16 02:54 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-12-16 02:54 - 2015-12-16 02:54 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-12-16 02:54 - 2015-12-16 02:54 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-12-16 02:54 - 2015-12-16 02:54 - 00000000 ____D C:\WINDOWS\system32\DAX2
2015-12-16 02:54 - 2015-12-16 02:54 - 00000000 ____D C:\Program Files\Realtek
2015-12-16 02:54 - 2015-12-16 02:54 - 00000000 _____ C:\WINDOWS\ativpsrm.bin
2015-12-16 02:53 - 2015-10-30 02:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-12-16 02:50 - 2015-12-16 03:14 - 00399144 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-11 22:33 - 2015-12-11 22:33 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-12-04 20:04 - 2015-12-05 20:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2015-11-29 11:08 - 2015-11-29 11:08 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
2015-11-29 11:08 - 2015-11-29 11:08 - 00000000 ____D C:\Program Files (x86)\Apple Software Update

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-28 22:46 - 2015-10-30 02:21 - 00000000 ____D C:\WINDOWS\INF
2015-12-28 22:45 - 2015-10-30 01:28 - 00000000 ____D C:\Windows
2015-12-28 22:45 - 2012-04-09 06:42 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-28 22:41 - 2010-07-10 22:29 - 00000920 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-28 22:40 - 2011-02-22 05:38 - 00000000 ____D C:\WINDOWS\SysWOW64\logishrd
2015-12-28 22:40 - 2011-02-22 05:38 - 00000000 ____D C:\WINDOWS\system32\logishrd
2015-12-28 22:39 - 2015-10-30 01:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-28 22:22 - 2010-07-10 22:29 - 00000924 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-28 22:14 - 2009-11-05 16:20 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-12-28 22:13 - 2014-07-03 14:44 - 00000000 ____D C:\Users\Owner\AppData\Local\Adobe
2015-12-28 22:13 - 2009-11-05 16:20 - 00000000 ____D C:\ProgramData\Adobe
2015-12-28 18:35 - 2015-10-30 02:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-28 18:35 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-28 08:51 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\Performance
2015-12-27 14:09 - 2014-06-12 15:59 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-25 10:03 - 2011-06-20 19:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-24 21:00 - 2015-10-30 02:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-12-24 20:35 - 2015-05-25 20:53 - 00000000 ____D C:\Users\Owner\AppData\Local\Skype
2015-12-24 20:35 - 2010-07-17 23:36 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Skype
2015-12-24 20:35 - 2010-07-17 23:35 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-24 20:35 - 2010-07-17 23:35 - 00000000 ____D C:\ProgramData\Skype
2015-12-23 08:21 - 2010-10-09 14:50 - 00000000 ____D C:\Users\Owner\AppData\Local\Apple Computer
2015-12-23 08:21 - 2010-08-23 20:09 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Apple Computer
2015-12-23 07:14 - 2015-10-30 02:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-19 03:37 - 2014-03-01 10:54 - 00451040 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2015-12-19 03:37 - 2014-03-01 10:54 - 00097648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys
2015-12-19 03:30 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-12-19 03:30 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-12-19 03:30 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2015-12-17 22:52 - 2012-12-05 18:06 - 00000000 ____D C:\Users\Owner\AppData\Local\ElevatedDiagnostics
2015-12-17 22:41 - 2015-03-31 19:59 - 00028144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2015-12-17 22:41 - 2014-05-02 16:07 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-12-17 22:41 - 2014-03-01 10:54 - 01055560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-12-17 22:41 - 2014-03-01 10:54 - 00273784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-12-17 22:41 - 2014-03-01 10:54 - 00155304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-12-17 22:41 - 2014-03-01 10:54 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-12-17 22:41 - 2014-03-01 10:54 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-12-17 22:41 - 2014-03-01 10:54 - 00004006 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-12-17 22:41 - 2014-03-01 10:53 - 00000000 ____D C:\ProgramData\AVAST Software
2015-12-17 22:41 - 2014-03-01 10:53 - 00000000 ____D C:\Program Files\AVAST Software
2015-12-17 22:37 - 2009-11-05 16:19 - 00000000 ____D C:\Program Files (x86)\Google
2015-12-17 22:21 - 2010-05-16 12:34 - 00000000 ____D C:\Users\Owner\AppData\Local\Google
2015-12-17 19:23 - 2014-06-12 15:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-12-17 19:23 - 2014-06-12 15:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-17 19:23 - 2014-03-01 11:00 - 00001182 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-12-17 19:21 - 2015-08-21 04:34 - 00000000 ____D C:\Users\Owner\AppData\Local\Packages
2015-12-17 05:44 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\appcompat
2015-12-16 05:48 - 2015-10-30 02:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-12-16 05:45 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-12-16 05:45 - 2015-10-30 01:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-12-16 05:45 - 2015-10-30 01:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-12-16 05:38 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-12-16 05:38 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-12-16 05:38 - 2015-10-30 02:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2015-12-16 05:38 - 2015-10-30 02:19 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2015-12-16 05:38 - 2015-10-30 02:19 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2015-12-16 05:38 - 2015-10-30 02:19 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2015-12-16 05:38 - 2015-10-30 02:19 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2015-12-16 05:38 - 2015-10-30 02:19 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2015-12-16 05:38 - 2015-10-30 02:19 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2015-12-16 05:38 - 2015-10-30 02:19 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2015-12-16 05:38 - 2015-10-30 02:19 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2015-12-16 05:38 - 2015-10-30 02:19 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2015-12-16 05:38 - 2015-10-30 02:19 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2015-12-16 05:38 - 2015-10-30 02:19 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2015-12-16 05:38 - 2015-10-30 02:19 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2015-12-16 05:38 - 2015-10-30 02:19 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2015-12-16 05:38 - 2015-10-30 02:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2015-12-16 05:38 - 2015-10-30 02:19 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2015-12-16 05:38 - 2015-10-30 02:18 - 01417728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2015-12-16 05:38 - 2015-10-30 02:18 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2015-12-16 05:38 - 2015-10-30 02:18 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2015-12-16 05:38 - 2015-10-30 02:18 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2015-12-16 05:38 - 2015-10-30 02:18 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2015-12-16 05:38 - 2015-10-30 02:18 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2015-12-16 05:38 - 2015-10-30 02:18 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2015-12-16 05:38 - 2015-10-30 02:18 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2015-12-16 05:38 - 2015-10-30 02:18 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2015-12-16 05:38 - 2015-10-30 02:18 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2015-12-16 05:38 - 2015-10-30 02:18 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2015-12-16 05:38 - 2015-10-30 02:18 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2015-12-16 05:38 - 2015-10-30 02:18 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2015-12-16 05:38 - 2015-10-30 02:18 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2015-12-16 05:38 - 2015-10-30 02:18 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2015-12-16 05:38 - 2015-10-30 02:18 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2015-12-16 05:38 - 2015-10-30 02:18 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2015-12-16 05:38 - 2015-10-30 02:18 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2015-12-16 05:38 - 2015-10-30 02:18 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2015-12-16 05:38 - 2015-10-30 02:18 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2015-12-16 05:38 - 2015-10-30 02:18 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2015-12-16 03:47 - 2015-10-30 02:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2015-12-16 03:33 - 2015-08-21 04:39 - 00002413 _____ C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-16 03:33 - 2015-08-21 04:39 - 00000000 ___RD C:\Users\Owner\OneDrive
2015-12-16 03:29 - 2015-10-30 02:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-12-16 03:29 - 2015-10-30 02:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-12-16 03:28 - 2015-10-30 02:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-12-16 03:28 - 2015-10-30 01:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-12-16 03:27 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-12-16 03:27 - 2015-08-21 04:34 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-12-16 03:26 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\rescache
2015-12-16 03:26 - 2015-08-20 20:53 - 00027596 _____ C:\WINDOWS\diagerr.xml
2015-12-16 03:26 - 2015-08-20 20:53 - 00026673 _____ C:\WINDOWS\diagwrn.xml
2015-12-16 03:24 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\Registration
2015-12-16 03:22 - 2015-08-20 22:02 - 00022840 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-12-16 03:22 - 2014-07-12 10:52 - 00002954 _____ C:\WINDOWS\System32\Tasks\HP AR Program Upload - 466ca921d9e344e585631632fec594097d4f46bc26904bda93f9e6299b210eb7
2015-12-16 03:22 - 2014-03-01 09:11 - 00002502 _____ C:\WINDOWS\System32\Tasks\{E056D996-F92F-4D3A-A0D5-ACD05D0714EA}
2015-12-16 03:22 - 2014-02-18 22:21 - 00002436 _____ C:\WINDOWS\System32\Tasks\{D4519B58-B14C-42BA-8278-A94905EC0332}
2015-12-16 03:22 - 2012-10-16 20:37 - 00002672 _____ C:\WINDOWS\System32\Tasks\HPCustParticipation HP Photosmart 6520 series
2015-12-16 03:22 - 2012-04-11 19:07 - 00002854 _____ C:\WINDOWS\System32\Tasks\Ad-Aware Update (Weekly)
2015-12-16 03:22 - 2010-07-10 22:29 - 00003436 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-16 03:21 - 2015-10-30 02:24 - 00000000 __RSD C:\WINDOWS\Media
2015-12-16 03:21 - 2015-08-05 20:54 - 00002954 _____ C:\WINDOWS\System32\Tasks\HP AR Program Upload - dcf4dc4bbcd1424c807082dd14751fc092cd73a10b1f4877a6220f2c284f943d
2015-12-16 03:21 - 2015-01-06 20:26 - 00002954 _____ C:\WINDOWS\System32\Tasks\HP AR Program Upload - 75cc592e3e694dfc8ac84bcff35b5ed16dd87abf9472493d9381d5d00e2afaf2
2015-12-16 03:21 - 2014-10-10 16:07 - 00002954 _____ C:\WINDOWS\System32\Tasks\HP AR Program Upload - 53de797fdab24aec82cae13ba7d174e783ec6320dd9f4ebdbdb747d8a04a3936
2015-12-16 03:21 - 2014-08-29 20:03 - 00002702 _____ C:\WINDOWS\System32\Tasks\GarminUpdaterTask
2015-12-16 03:21 - 2014-03-01 09:27 - 00002292 _____ C:\WINDOWS\System32\Tasks\{770BF445-099A-4FF4-A2FA-7B4D9321B43B}
2015-12-16 03:21 - 2014-02-26 05:32 - 00002438 _____ C:\WINDOWS\System32\Tasks\{59F2B270-2CF1-44B2-86A3-66FEE7B6D90A}
2015-12-16 03:21 - 2014-02-23 22:37 - 00002366 _____ C:\WINDOWS\System32\Tasks\{487217B0-F80F-428C-852A-1295EBAB4602}
2015-12-16 03:21 - 2014-02-18 22:58 - 00002436 _____ C:\WINDOWS\System32\Tasks\{2D6133B4-5B67-41D5-B1E3-3FDB135CDC8A}
2015-12-16 03:21 - 2013-12-28 16:47 - 00002428 _____ C:\WINDOWS\System32\Tasks\{D807633C-F175-4D5E-8BAF-4A218E7C774F}
2015-12-16 03:21 - 2013-07-20 22:06 - 00002954 _____ C:\WINDOWS\System32\Tasks\HP AR Program Upload - 2aaca07465ed437c902607766218258a0ec1d59c254a418e84a224bf19e3f60d
2015-12-16 03:21 - 2013-06-24 04:45 - 00002954 _____ C:\WINDOWS\System32\Tasks\HP AR Program Upload - c3676b855b1e42b7b57f48aa8548c7c1147ef29d997144a7b3e7d75994c0c1e5
2015-12-16 03:21 - 2013-02-13 19:48 - 00002954 _____ C:\WINDOWS\System32\Tasks\HP AR Program Upload - 1b48bc1923a94fda88b9582afb4a73a84d65bc9513244d12b2a5e697cf6cab36
2015-12-16 03:21 - 2012-10-20 18:36 - 00002200 _____ C:\WINDOWS\System32\Tasks\{3585FC9C-71FC-48D1-968A-C17EE25CC19E}
2015-12-16 03:21 - 2012-05-12 22:45 - 00003482 _____ C:\WINDOWS\System32\Tasks\Ad-Aware Antivirus Scheduled Scan
2015-12-16 03:21 - 2012-04-09 06:42 - 00003110 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-12-16 03:21 - 2011-06-18 23:22 - 00002132 _____ C:\WINDOWS\System32\Tasks\{26CA5315-4A92-4C78-995E-5303EE36A136}
2015-12-16 03:21 - 2010-07-17 23:36 - 00002024 _____ C:\WINDOWS\System32\Tasks\{4BB412E8-F56B-4EB3-A9D1-8D4412B33D87}
2015-12-16 03:21 - 2010-07-10 23:14 - 00002434 _____ C:\WINDOWS\System32\Tasks\{D5F35C68-E6FF-4CA6-8B08-E6257206ED10}
2015-12-16 03:21 - 2010-07-10 23:09 - 00002718 _____ C:\WINDOWS\System32\Tasks\EasyShare Registration Task
2015-12-16 03:21 - 2010-07-10 22:29 - 00003212 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-16 03:20 - 2015-10-30 02:24 - 00000000 __RHD C:\Users\Public\Libraries
2015-12-16 03:13 - 2014-11-20 20:38 - 00000000 ____D C:\WINDOWS\SysWOW64\vbox
2015-12-16 03:13 - 2014-11-20 20:38 - 00000000 ____D C:\WINDOWS\system32\vbox
2015-12-16 03:12 - 2015-11-06 05:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2015-12-16 03:12 - 2015-10-30 02:24 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2015-12-16 03:12 - 2015-07-31 18:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-12-16 03:12 - 2014-10-11 20:32 - 00000000 ____D C:\Program Files (x86)\NETGEAR Genie
2015-12-16 03:12 - 2014-05-02 20:30 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-12-16 03:12 - 2014-03-08 23:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bing Desktop
2015-12-16 03:12 - 2013-03-14 02:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-16 03:12 - 2012-10-16 20:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-12-16 03:12 - 2012-09-17 20:41 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Enhanced Mitigation Experience Toolkit
2015-12-16 03:12 - 2012-08-11 19:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rhapsody
2015-12-16 03:12 - 2012-05-08 20:11 - 00000000 ____D C:\WINDOWS\en
2015-12-16 03:12 - 2012-02-12 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Software995
2015-12-16 03:12 - 2011-09-05 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Panorama Maker 5
2015-12-16 03:12 - 2011-09-05 20:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nikon Message Center 2
2015-12-16 03:12 - 2011-09-05 20:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ViewNX 2
2015-12-16 03:12 - 2011-09-05 20:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link to Nikon
2015-12-16 03:12 - 2010-10-21 19:54 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-12-16 03:12 - 2010-09-04 08:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Greetings Workshop
2015-12-16 03:12 - 2010-07-19 20:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2015-12-16 03:12 - 2010-07-10 23:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Print Creations
2015-12-16 03:12 - 2010-07-10 23:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Connect
2015-12-16 03:12 - 2009-12-26 04:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works
2015-12-16 03:12 - 2009-11-05 16:16 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gateway
2015-12-16 03:12 - 2009-11-05 16:12 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-12-16 03:12 - 2009-11-05 16:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Best Buy Software Installer
2015-12-16 03:10 - 2015-07-10 04:05 - 00000000 ____D C:\Users\Default.migrated
2015-12-16 03:05 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-12-16 03:05 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-12-16 03:05 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\spool
2015-12-16 03:05 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-16 03:05 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-16 03:05 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\IME
2015-12-16 03:05 - 2011-06-17 22:57 - 00000000 ____D C:\WINDOWS\system32\SPReview
2015-12-16 03:05 - 2011-06-17 22:56 - 00000000 ____D C:\WINDOWS\system32\EventProviders
2015-12-16 03:05 - 2009-11-05 15:47 - 00000000 ____D C:\WINDOWS\SysWOW64\OEM
2015-12-16 03:04 - 2015-10-30 04:07 - 00000000 ____D C:\WINDOWS\ShellNew
2015-12-16 03:04 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\schemas
2015-12-16 03:04 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-12-16 03:04 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-12-16 03:03 - 2015-10-30 02:24 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-12-16 03:03 - 2015-10-30 02:24 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-12-16 03:03 - 2015-10-30 02:24 - 00000000 ____D C:\ProgramData\USOPrivate
2015-12-16 03:03 - 2015-10-30 02:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-16 03:03 - 2012-10-20 18:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eddy Current1
2015-12-16 03:03 - 2010-07-10 23:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodak
2015-12-16 03:03 - 2009-07-14 02:44 - 00000000 ___RD C:\Users\Public\Recorded TV
2015-12-16 03:03 - 2009-07-14 00:32 - 00000000 ____D C:\Program Files\Microsoft Games
2015-12-16 03:01 - 2012-08-11 19:48 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SanDisk
2015-12-16 03:01 - 2010-09-04 08:28 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Greetings Workshop
2015-12-16 02:57 - 2015-10-30 01:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-12-16 02:50 - 2015-10-30 04:13 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2015-12-16 02:15 - 2015-10-30 04:42 - 00000000 ___HD C:\$WINDOWS.~BT
2015-12-09 03:48 - 2013-03-14 02:02 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-09 03:48 - 2013-03-14 02:02 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-09 03:48 - 2012-10-15 04:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-08 22:39 - 2010-05-16 12:48 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-12-08 20:31 - 2013-09-08 19:44 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-08 20:24 - 2010-05-16 14:36 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-04 19:15 - 2014-11-30 18:53 - 00029184 _____ C:\Users\Owner\Documents\3x5cards.xls
2015-11-30 19:33 - 2015-10-30 02:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-11-30 19:33 - 2015-10-30 02:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-29 11:08 - 2015-07-28 21:11 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk

==================== Files in the root of some directories =======

2014-03-01 10:33 - 2014-03-01 10:33 - 0000378 _____ () C:\Program Files (x86)\temp995.bat
2012-11-15 18:01 - 2013-12-11 07:30 - 10395072 _____ (Webroot Software, Inc.) C:\Program Files (x86)\Common Files\wruninstall.exe
2011-09-05 20:27 - 2011-09-05 20:27 - 0000268 ___RH () C:\Users\Owner\AppData\Roaming\Desktop Pictures
2011-09-05 20:27 - 2011-09-05 20:27 - 0000268 ___RH () C:\Users\Owner\AppData\Roaming\Developer Tools
2011-09-05 20:27 - 2011-09-05 20:27 - 0000268 ___RH () C:\Users\Owner\AppData\Roaming\Devices
2012-09-19 21:06 - 2012-09-19 21:06 - 0870128 _____ () C:\Users\Owner\AppData\Roaming\mcs.rma
2010-08-28 23:04 - 2010-08-28 23:04 - 0000000 _____ () C:\Users\Owner\AppData\Roaming\wklnhst.dat
2010-10-25 20:01 - 2014-02-24 21:43 - 0009728 _____ () C:\Users\Owner\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-06-15 18:55 - 2011-06-15 18:56 - 0000000 _____ () C:\Users\Owner\AppData\Local\{0BE3CD94-84FC-40EF-B97B-ABED9326EC5C}
2011-05-18 20:13 - 2011-06-04 07:48 - 0001940 _____ () C:\Users\Owner\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
2012-10-16 20:37 - 2012-10-16 20:37 - 0000057 _____ () C:\ProgramData\Ament.ini
2011-09-05 20:27 - 2011-09-05 20:27 - 0000268 ___RH () C:\ProgramData\Dictionaries
2011-09-05 20:27 - 2011-09-05 20:27 - 0000268 ___RH () C:\ProgramData\Digital Basic
2011-09-05 20:27 - 2011-09-05 20:27 - 0000268 ___RH () C:\ProgramData\Digital Light
2015-12-16 02:54 - 2015-12-16 02:54 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2010-07-17 23:41 - 2010-07-17 23:41 - 0000048 ____H () C:\ProgramData\ezsidmv.dat
2011-09-05 20:27 - 2011-09-05 20:27 - 0000020 ____H () C:\ProgramData\PKP_DLes.DAT
2011-09-05 20:27 - 2011-11-29 19:42 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT
2011-09-05 20:27 - 2011-11-29 19:37 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT

Some files in TEMP:
====================
C:\Users\Owner\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-12-26 14:13

==================== End of FRST.txt ============================
huskyrog
Active Member
 
Posts: 7
Joined: December 26th, 2015, 2:29 pm

Re: FaceBook reward wheel, spin the lucky wheel will not go

Unread postby huskyrog » December 29th, 2015, 12:20 am

Additional scan result of Farbar Recovery Scan Tool (x64) Version:28-12-2015
Ran by Owner (2015-12-28 22:55:11)
Running from C:\Users\Owner\Downloads
Windows 10 Home (X64) (2015-12-16 08:27:29)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3901721066-3880018567-3824620293-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3901721066-3880018567-3824620293-503 - Limited - Disabled)
Guest (S-1-5-21-3901721066-3880018567-3824620293-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3901721066-3880018567-3824620293-1002 - Limited - Enabled)
Owner (S-1-5-21-3901721066-3880018567-3824620293-1000 - Administrator - Enabled) => C:\Users\Owner

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 20.0.0.204 - Adobe Systems Incorporated)
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Apple Application Support (32-bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
ArcSoft Panorama Maker 5 (HKLM-x32\...\{F18046C5-1C4E-4BE1-A3D6-A6F970E2E8E8}) (Version: 5.0.1.25 - ArcSoft)
ArcSoft Print Creations - Album Page (HKLM-x32\...\{E6B4117F-AC59-4B13-9274-EB136E8897EE}) (Version: - ArcSoft)
ArcSoft Print Creations - Funhouse (HKLM-x32\...\{9591C049-5CAE-4E89-A8D9-191F1899628B}) (Version: - ArcSoft)
ArcSoft Print Creations - Greeting Card (HKLM-x32\...\{F04F9557-81A9-4293-BC49-2C216FA325A7}) (Version: - ArcSoft)
ArcSoft Print Creations - Photo Book (HKLM-x32\...\{56589DFE-0C29-4DFE-8E42-887B771ECD23}) (Version: - ArcSoft)
ArcSoft Print Creations - Photo Calendar (HKLM-x32\...\{CA9ED5E4-1548-485B-A293-417840060158}) (Version: - ArcSoft)
ArcSoft Print Creations - Scrapbook (HKLM-x32\...\{B0D83FCD-9D42-43ED-8315-250326AADA02}) (Version: - ArcSoft)
ArcSoft Print Creations - Slimline Card (HKLM-x32\...\{007B37D9-0C45-4202-834B-DD5FAAE99D63}) (Version: - ArcSoft)
ArcSoft Print Creations (HKLM-x32\...\{CAE8A0F1-B498-4C23-95FA-55047E730C8F}) (Version: 2.8.255.384 - ArcSoft)
ATI Catalyst Install Manager (HKLM\...\{1F9241E8-87C1-FB9C-5D76-3FF7D0318A87}) (Version: 3.0.732.0 - ATI Technologies, Inc.)
Avast Internet Security (HKLM-x32\...\Avast) (Version: 11.1.2245 - AVAST Software)
Best Buy Software Installer (HKLM-x32\...\Best Buy Software Installer) (Version: 2.1.0.30 - Best Buy)
Best Buy Software Installer (Version: 2.1.0.30 - Best Buy) Hidden
Bing Bar (HKLM-x32\...\{FF6DD716-7B10-4269-9F19-FFB07AC4CD95}) (Version: 7.3.124.0 - Microsoft Corporation)
Bing Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.470.0 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CameraHelperMsi (x32 Version: 13.10.1217.0 - Logitech) Hidden
ccc-core-static (x32 Version: 2009.0702.1239.20840 - ATI) Hidden
CCScore (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.)
Eddy Current Level 1 (HKLM-x32\...\Eddy Current Level 1) (Version: - )
Elevated Installer (x32 Version: 4.1.10.0 - Garmin Ltd or its subsidiaries) Hidden
EMET (HKLM-x32\...\{90CD53EC-488B-4B1A-8C6B-3C36E82A84CA}) (Version: 2.1.0 - Microsoft)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESSBrwr (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
ESSCDBK (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
ESScore (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
ESSgui (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
ESSini (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
ESSPCD (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
ESSPDock (x32 Version: 6.03.0001.0004 - EASTMAN KODAK Company) Hidden
ESSTOOLS (x32 Version: 5.00.0000.0004 - EASTMAN KODAK Company) Hidden
essvatgt (x32 Version: 8.00.0000.0001 - EASTMAN KODAK Company) Hidden
Garmin Communicator Plugin (HKLM-x32\...\{71DBFBF2-F7EB-4268-8485-9471D83C4E66}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)
Garmin Communicator Plugin x64 (HKLM\...\{70A381F1-C161-4D61-A20C-BE12FC6777DF}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{b292f4e5-60ca-4bb8-8810-e5f908c3c1ff}) (Version: 4.1.10.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 4.1.10.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 4.1.10.0 - Garmin Ltd or its subsidiaries) Hidden
Gateway InfoCentre (HKLM-x32\...\Gateway InfoCentre) (Version: 3.02.3000 - Gateway Incorporated)
Gateway Photo Frame 4.2.3.10 (HKLM-x32\...\Gateway Photo Frame) (Version: 4.2.3.10 - I/O Interconnect)
Gateway Recovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3005 - Gateway Incorporated)
Gateway Registration (HKLM-x32\...\Gateway Registration) (Version: 1.02.3006 - Gateway Incorporated)
Gateway ScreenSaver (HKLM-x32\...\Gateway Screensaver) (Version: 1.1.0812 - Gateway Incorporated)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7210.1528 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Greetings Workshop (HKLM-x32\...\Greetings Workshop) (Version: - )
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Photosmart 6520 series Basic Device Software (HKLM\...\{9BB919AA-7F13-4003-BC37-AD2F8294DEBC}) (Version: 28.0.989.0 - Hewlett-Packard Co.)
HP Photosmart 6520 series Help (HKLM-x32\...\{D3293275-1002-41F5-BC37-099B4251FF5B}) (Version: 28.0.0 - Hewlett Packard)
HP Photosmart 6520 series Product Improvement Study (HKLM\...\{CE66F95C-D7EE-458E-8E08-DE5272B9CC71}) (Version: 28.0.989.0 - Hewlett-Packard Co.)
HP Update (HKLM-x32\...\{97486FBE-A3FC-4783-8D55-EA37E9D171CC}) (Version: 5.005.000.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
iCloud (HKLM\...\{4B48E22A-2FB0-4EFA-B99E-954B1E50CD69}) (Version: 5.1.0.34 - Apple Inc.)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3002 - Gateway Incorporated)
Internet TV for Windows Media Center (HKLM-x32\...\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}) (Version: 4.2.2.0 - Microsoft Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kodak EasyShare software (HKLM-x32\...\{D32470A1-B10C-4059-BA53-CF0486F68EBC}) (Version: - Eastman Kodak Company)
Logitech Vid HD (HKLM-x32\...\Logitech Vid) (Version: 7.2 (7230) - Logitech Inc..)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.0 - Logitech Inc.)
Logitech Webcam Software Driver Package (HKLM\...\lvdrivers_12.0) (Version: 12.0.1278 - Logitech Inc.)
LWS VideoEffects (Version: 13.00.1774.0 - Logitech) Hidden
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Marvell Miniport Driver (HKLM-x32\...\Marvell Miniport Driver) (Version: 10.70.3.3 - Marvell)
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM-x32\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Standard Edition 2003 (HKLM-x32\...\{91120409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{67E03279-F703-408F-B4BF-46B5FC8D70CD}) (Version: 9.7.0621 - Microsoft Corporation)
Mozilla Firefox 43.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 43.0.2 (x86 en-US)) (Version: 43.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.0.1 - Mozilla)
Mozilla Thunderbird 38.4.0 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 38.4.0 (x86 en-US)) (Version: 38.4.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
netbrdg (x32 Version: 7.01.0000.0001 - EASTMAN KODAK Company) Hidden
NETGEAR Genie (HKLM-x32\...\NETGEAR Genie) (Version: 2.3.1.25 - NETGEAR Inc.)
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.0.1 - Nikon)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.7 - )
OfotoXMI (x32 Version: 8.02.1000.0001 - EASTMAN KODAK Company) Hidden
Picture Control Utility (HKLM-x32\...\{87441A59-5E64-4096-A170-14EFE67200C3}) (Version: 1.2.2 - Nikon)
QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Rhapsody (HKLM-x32\...\Rhapsody) (Version: - )
SafeZone Stable 1.46.1990.144 (x32 Version: 1.46.1990.144 - Avast Software) Hidden
Sansa Updater (HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\...\Sansa Updater) (Version: 1.313 - SanDisk Corporation)
SFR (x32 Version: 8.01.0000.0001 - Eastman Kodak Company) Hidden
SHASTA (x32 Version: 7.01.0000.0001 - EASTMAN KODAK Company) Hidden
skin0001 (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
SKINXSDK (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
Skype Toolbars (HKLM-x32\...\{981029E0-7FC9-4CF3-AB39-6F133621921A}) (Version: 1.0.4051 - Skype Technologies S.A.)
Skype™ 7.17 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.17.105 - Skype Technologies S.A.)
staticcr (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 3.7.3 - Tweaking.com)
ViewNX 2 (HKLM-x32\...\{DDD62492-32A7-412B-8AF1-2CF032AD42E3}) (Version: 2.1.2 - Nikon)
Visual C++ 2008 x86 Runtime - v9.0.30729.01 (HKLM-x32\...\{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01) (Version: 9.0.30729.01 - Microsoft Corporation)
VPRINTOL (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
WebIQ Technology Engine (HKLM-x32\...\{0F2F77E4-4053-4108-B153-81F0B42EDCF4}) (Version: 1.5.7100 - Usability Sciences Corporation)
Welcome Center (HKLM-x32\...\Gateway Welcome Center) (Version: 1.00.3008 - Gateway Incorporated)
Windows Driver Package - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows Driver Package - Scientific-Atlanta (USBCM) Net (06/10/2004 1.12.0.0000) (HKLM\...\9C6975C1801E1FD9353B8A42B5C15E8EA5E0B66E) (Version: 06/10/2004 1.12.0.0000 - Scientific-Atlanta)
Windows Driver Package - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Media Center Add-in for Flash (HKLM-x32\...\{E2D09AC2-4153-4817-AAEB-24F92A8BCE88}) (Version: 4.1.2.0 - Microsoft Corporation)
Windows Media Center Add-in for Silverlight (HKLM-x32\...\{0EDBEB2B-7C8D-42E6-8312-0F84394A3223}) (Version: 4.7.3.0 - Microsoft Corporation)
WIRELESS (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Owner\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Owner\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Owner\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Owner\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Owner\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Owner\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Owner\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Owner\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Owner\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Owner\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\Owner\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Owner\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Owner\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Owner\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Owner\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Owner\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => No File

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {04FC2721-D653-4C19-A1EB-4F0B7623C94F} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {08BCFC29-7780-4B77-8AE6-B6095F259B45} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {0C661EB8-8268-4615-A419-502D524E9F11} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {10140B52-209F-4A34-AE90-DEEB2886D013} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {1727757D-45DD-4E9A-A62B-75F35EF33C97} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {17809E23-FAF2-4DD8-ACFA-D7B357E1CD36} - System32\Tasks\{26CA5315-4A92-4C78-995E-5303EE36A136} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2015-12-04] (Mozilla Corporation)
Task: {1A8F92DA-278B-4FF0-9492-1E27027BD645} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {26F5CF55-DF67-48B8-8502-614CCDC0D3DF} - System32\Tasks\SafeZone scheduled Autoupdate 1450410503 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2015-12-21] (Avast Software)
Task: {27FE5FF3-52CF-43E7-9695-2823C231F8E5} - System32\Tasks\HP AR Program Upload - 53de797fdab24aec82cae13ba7d174e783ec6320dd9f4ebdbdb747d8a04a3936 => C:\Program Files\HP\HP Photosmart 6520 series\bin\HPRewards.exe [2012-05-08] (TODO: <Company name>)
Task: {2FDBDF17-7B91-41F3-9DE1-0627AD80E320} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {34E2C759-F022-4A23-A871-ADF71753AA1B} - System32\Tasks\HP AR Program Upload - 75cc592e3e694dfc8ac84bcff35b5ed16dd87abf9472493d9381d5d00e2afaf2 => C:\Program Files\HP\HP Photosmart 6520 series\bin\HPRewards.exe [2012-05-08] (TODO: <Company name>)
Task: {34E907E5-318B-4E5C-BDBE-C143E0BAB978} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe [2015-03-11] (Tweaking.com)
Task: {3A9B3EFC-C1C2-4C39-90A0-00DB74F9E527} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {3D728765-1B06-48FD-BBB0-A3EEB5FBF514} - System32\Tasks\{770BF445-099A-4FF4-A2FA-7B4D9321B43B} => pcalua.exe -a C:\Users\Owner\Downloads\Adaware_Installer.exe -d C:\Users\Owner\Downloads
Task: {3E0BEE3D-AB44-4EFB-8217-F02A5B37F0C2} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {43FE7A9C-E340-4758-826B-68CFFD0A3DD7} - System32\Tasks\{4BB412E8-F56B-4EB3-A9D1-8D4412B33D87} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-12-17] (Skype Technologies S.A.)
Task: {45EDEFA9-A009-4ACC-8B10-D06D78D24431} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-12-08] (Microsoft Corporation)
Task: {4D2A59B8-3B0F-487A-BF35-6CACD4C902DB} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {4F79E27F-5C46-4699-943E-CC333ACBBA1D} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {506E8F7D-1BFA-42C1-B6AC-F0D884605B9C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {538174DB-5D2A-45F8-A9C2-12C4151E1AFF} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {618B9E4D-2E6F-43C8-A7F3-45724020B7CC} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2015-10-29] ()
Task: {6BB340D6-5BF6-441E-9C7D-8AC50718E6DD} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {74EB781C-6412-40E2-A208-91CC72E7BDE4} - System32\Tasks\{59F2B270-2CF1-44B2-86A3-66FEE7B6D90A} => pcalua.exe -a "C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CVIPMBGT\Adaware_Installer_free.exe" -d C:\Users\Owner\Desktop
Task: {7A026218-049D-4DD4-8936-3641B81A2FAC} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {7EC3FBF2-14B8-4DFB-A2E9-CAE1D67EFFD0} - System32\Tasks\EasyShare Registration Task => Rundll32.exe C:\PROGRA~3\Kodak\EasyShareSetup\$REGIS~1\Registration_8.2.30.1.sxt _RegistrationOffer@16
Task: {84A935DE-652F-465A-8FBD-CC668AC85414} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-14] (Adobe Systems Incorporated)
Task: {851A1365-DEA0-47DE-9C83-D5C4947545AD} - System32\Tasks\{487217B0-F80F-428C-852A-1295EBAB4602} => pcalua.exe -a C:\Users\Owner\Downloads\4d9c38ed-5cb0-439b-acec-6573e3bef688_Adaware_Installer.exe -d C:\Users\Owner\Downloads
Task: {87C2F15B-FE8D-4167-AF05-FA639EE1CE5D} - System32\Tasks\HP AR Program Upload - 1b48bc1923a94fda88b9582afb4a73a84d65bc9513244d12b2a5e697cf6cab36 => C:\Program Files\HP\HP Photosmart 6520 series\bin\HPRewards.exe [2012-05-08] (TODO: <Company name>)
Task: {8E8AF9B4-E3C9-442D-9843-EC33283B5A18} - System32\Tasks\{D5F35C68-E6FF-4CA6-8B08-E6257206ED10} => pcalua.exe -a "C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6TX421DC\install_easyshare[1].exe" -d C:\Users\Owner\Desktop
Task: {912CCEF8-4FEA-4042-A7C8-3C0496E6474E} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {9265F29D-7967-4F51-9B28-A02AAE8942E3} - System32\Tasks\HP AR Program Upload - 2aaca07465ed437c902607766218258a0ec1d59c254a418e84a224bf19e3f60d => C:\Program Files\HP\HP Photosmart 6520 series\bin\HPRewards.exe [2012-05-08] (TODO: <Company name>)
Task: {9443C7EF-5164-46AA-A884-05ADDE23B522} - System32\Tasks\HP AR Program Upload - c3676b855b1e42b7b57f48aa8548c7c1147ef29d997144a7b3e7d75994c0c1e5 => C:\Program Files\HP\HP Photosmart 6520 series\bin\HPRewards.exe [2012-05-08] (TODO: <Company name>)
Task: {94B64B07-3437-42D0-B538-2C5CFA8D7D07} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {96962895-334E-4D14-8A01-D053CBE49451} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {9A0639A8-8087-4E20-B99C-394A11475884} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {9E4344F6-AB9F-4D42-A8F6-2B1AA876E8DC} - System32\Tasks\{D807633C-F175-4D5E-8BAF-4A218E7C774F} => pcalua.exe -a "C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PYRGJYBT\Adaware_Installer.exe" -d C:\Users\Owner\Desktop
Task: {A1068E25-D7E3-442B-B9AF-0A0D5874F73F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {A3475048-5695-4943-99B7-3C2F8CA6CCC2} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {A6245D91-5CED-47BE-AA72-9A7059A218AA} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\AD-AWA~1\AdAwareLauncher.exe
Task: {A88AC861-7016-4653-AA8E-725702BEDF59} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {A8F59CCC-D90C-434D-B1FF-FC5612E09F8E} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {AB9CA01C-A4CE-4BEC-8D58-49FEBCC9DA75} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {B0416744-921F-43FE-B452-A49A205B683C} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {BB9C0D72-C04B-45A8-97A6-252DFDEB6DB6} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {C1047E5B-C100-4E31-92F1-F7DAB46FF231} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {C35C369D-93D5-4E7C-9F7F-FE0E2D677110} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {C4E23441-63F7-4FA2-8ECC-C3506742EE27} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {C7CF1502-CB0B-47A2-973B-08CDF7500E0E} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-12-17] (AVAST Software)
Task: {C8B7DD2D-5278-41CB-820E-56E1E9861E44} - System32\Tasks\{3585FC9C-71FC-48D1-968A-C17EE25CC19E} => pcalua.exe -a D:\Ect1\SETUP.EXE -d D:\Ect1
Task: {CA6381D6-E027-4396-88BE-3C5AEDB75F75} - System32\Tasks\{2D6133B4-5B67-41D5-B1E3-3FDB135CDC8A} => pcalua.exe -a "C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3B0GYP62\Adaware_Installer (2).exe" -d C:\Users\Owner\Desktop
Task: {CF0F5E10-4F30-4C70-BC8D-46F4EC194C33} - System32\Tasks\HP AR Program Upload - dcf4dc4bbcd1424c807082dd14751fc092cd73a10b1f4877a6220f2c284f943d => C:\Program Files\HP\HP Photosmart 6520 series\bin\HPRewards.exe [2012-05-08] (TODO: <Company name>)
Task: {D14152CD-5423-4680-89A9-1B5EFD93D390} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {D1C1B53B-8B31-428C-8F31-CB9AF8D61364} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {D709DB85-CFCB-409E-BA8D-D77640811B72} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {D731CEC4-42D3-4508-AF73-5F298A143923} - System32\Tasks\{E056D996-F92F-4D3A-A0D5-ACD05D0714EA} => pcalua.exe -a "C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PYRGJYBT\4d9c38ed-5cb0-439b-acec-6573e3bef688_Adaware_Installer.exe" -d C:\Users\Owner\Desktop
Task: {E6E587DB-D3B8-4760-B372-9382BCC38259} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: {E89E8EA6-848D-4C14-9C3C-65516F2DE302} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {ED75FF16-F1B4-4C46-8B2D-644D8E75F225} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {F68D32E7-9DAC-4B77-AE9C-F973619CC31B} - System32\Tasks\{D4519B58-B14C-42BA-8278-A94905EC0332} => pcalua.exe -a "C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3B0GYP62\Adaware_Installer (1).exe" -d C:\Users\Owner\Desktop
Task: {F6BDA360-C871-428A-A047-65C97AD906A6} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {F9856F32-0514-4364-8239-FB2D519885CD} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {F9A924D8-741D-4355-8DB9-59E94FADD499} - System32\Tasks\HP AR Program Upload - 466ca921d9e344e585631632fec594097d4f46bc26904bda93f9e6299b210eb7 => C:\Program Files\HP\HP Photosmart 6520 series\bin\HPRewards.exe [2012-05-08] (TODO: <Company name>)
Task: {FCDEDC53-F522-4733-B8B2-4CA2653F83A0} - System32\Tasks\HPCustParticipation HP Photosmart 6520 series => C:\Program Files\HP\HP Photosmart 6520 series\Bin\HPCustPartic.exe [2012-05-08] (Hewlett-Packard Co.)
Task: {FE14F6BE-5B60-469A-9142-F1FF7ABBDB26} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\EasyShare Registration Task.job => C:\Windows\system32\rundll32.exeZC:\PROGRA~3\Kodak\EasyShareSetup\$REGIS~1\Registration_8.2.30.1.sxt
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-10-30 02:18 - 2015-10-30 02:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-16 05:44 - 2015-12-16 05:44 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-12-17 22:34 - 2015-12-17 22:34 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-12-18 05:51 - 2015-12-06 23:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-12-18 05:51 - 2015-12-06 23:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-12-18 05:52 - 2015-12-06 22:37 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-12-18 05:51 - 2015-12-06 22:33 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-12-18 05:52 - 2015-12-06 22:34 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-12-18 05:52 - 2015-12-06 22:36 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-12-17 22:41 - 2015-12-17 22:41 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-12-17 22:41 - 2015-12-17 22:41 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-12-28 21:28 - 2015-12-28 21:28 - 02806272 _____ () C:\Program Files\AVAST Software\Avast\defs\15122802\algo.dll
2015-12-17 22:41 - 2015-12-17 22:41 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2015-12-17 22:34 - 2015-12-17 22:34 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2015-12-17 22:34 - 2015-12-17 22:35 - 21845504 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2015-05-15 15:27 - 2015-05-15 15:27 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 00237328 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2015-10-13 05:46 - 2015-10-13 05:46 - 01040144 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-12-17 22:41 - 2015-12-17 22:41 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-12-04 20:05 - 2015-12-04 20:05 - 00153768 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2015-12-04 20:05 - 2015-12-04 20:05 - 00023208 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SamSs => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv2 => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srvnet => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WSService => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\...\real.com -> hxxps://rhap-app-4-0.real.com
IE trusted site: HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\...\rhapsody.com -> hxxps://rhap-app-4-0.rhapsody.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2012-12-08 11:44 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Owner\AppData\Roaming\Microsoft\Windows Live Photo Gallery\Windows Live Photo Gallery Wallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AtHomeConnect.lnk => C:\Windows\pss\AtHomeConnect.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Kodak EasyShare software.lnk => C:\Windows\pss\Kodak EasyShare software.lnk.CommonStartup
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: ArcSoft Connection Service => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
MSCONFIG\startupreg: BingDesktop => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe /fromkey
MSCONFIG\startupreg: Gateway Photo Frame => C:\Program Files (x86)\Gateway Photo Frame\ButtonMonitor.exe -A
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: LWS => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
MSCONFIG\startupreg: Nikon Message Center 2 => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
HKLM\...\StartupApproved\Run32: => "ShopAtHomeUpdater"
HKLM\...\StartupApproved\Run32: => "ShopAtHomeWatcher"
HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\...\StartupApproved\Run: => "GarminExpressTrayApp"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{B5C5CF02-85B1-46D9-AC60-F3EA87A1024F}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{43DB7FA0-D63D-4B0E-BF6D-7770786EF38C}] => (Allow) svchost.exe
FirewallRules: [{5972B3B1-0BA1-42A6-B7C1-36D84A400910}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{1EE8FDB2-440B-4CA3-B648-D6F5F57913BE}] => (Allow) C:\Windows\System32\migwiz\migwiz.exe
FirewallRules: [{CB8D3D9A-B0B6-4F46-AC8A-96AA37803404}] => (Allow) C:\Windows\System32\migwiz\migwiz.exe
FirewallRules: [{472E8017-73FC-4334-9282-6CAE0426D561}] => (Allow) LPort=7000
FirewallRules: [{5C820D2B-2E33-4426-8488-67DB4C973CCA}] => (Allow) LPort=7000
FirewallRules: [TCP Query User{7ECF7A0A-CBC7-4045-8269-8C9925DD390B}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{F1EB2F18-6C76-40EC-9908-E4447EA471F4}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [{EEA71C50-67AD-49DA-AFF1-BF5E667897E4}] => (Allow) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
FirewallRules: [{A73AE3CE-65C5-4DE5-BCA6-428CE51222F7}] => (Allow) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
FirewallRules: [{6F5F0323-D672-47FA-96C5-97616174985A}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{3FE4287D-9625-41D6-80ED-A8804C84A8E3}] => (Allow) LPort=2869
FirewallRules: [{5077047A-357A-4BE6-A7AA-90D6893C383C}] => (Allow) LPort=1900
FirewallRules: [TCP Query User{2818A8A4-00AA-4D68-9CCC-308CC9A28FB2}C:\users\owner\appdata\local\google\google earth\client\googleearth.exe] => (Block) C:\users\owner\appdata\local\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{959FE0C2-F500-42C8-AC5B-40B399194DAA}C:\users\owner\appdata\local\google\google earth\client\googleearth.exe] => (Block) C:\users\owner\appdata\local\google\google earth\client\googleearth.exe
FirewallRules: [{708CA111-ACBA-42C7-AD1E-1BEAEEFB3772}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{5B0B4982-F489-4DDA-86EC-67BD9B7E8F73}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{3867CE77-A04A-4640-BEA1-4B9AFACEEAD4}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{FC706E36-5041-4065-BC10-DA32893852AF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{CE097CE9-4114-4302-A18D-A9EAFE70FAD5}] => (Allow) C:\Program Files\HP\HP Photosmart 6520 series\Bin\DeviceSetup.exe
FirewallRules: [{5A2A0D81-2906-4A76-960C-268C48B0B513}] => (Allow) C:\Program Files\HP\HP Photosmart 6520 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{39992849-7006-44AB-B4A9-A1C905084321}] => (Allow) C:\Program Files\HP\HP Photosmart 6520 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [TCP Query User{2906B7CB-4EC3-405B-A336-EC86EBAE04BC}C:\users\owner\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe] => (Allow) C:\users\owner\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe
FirewallRules: [UDP Query User{2F601691-D332-4B2D-9513-49CB6F57A80C}C:\users\owner\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe] => (Allow) C:\users\owner\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe
FirewallRules: [{22895656-0F32-4518-9053-CDB40309BC71}] => (Allow) C:\Users\Owner\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{B7563457-9D81-4609-844E-A757E56E6614}] => (Allow) C:\Users\Owner\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{328FA7CE-563A-44A7-8EAF-764E3E13F42A}C:\program files (x86)\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files (x86)\netgear genie\bin\netgeargenie.exe
FirewallRules: [UDP Query User{FA149925-DB00-4AB3-84D5-F1C9A7C9C0DA}C:\program files (x86)\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files (x86)\netgear genie\bin\netgeargenie.exe
FirewallRules: [{10073B37-9E90-4A79-893E-F7C8AE54767E}] => (Block) C:\program files (x86)\netgear genie\bin\netgeargenie.exe
FirewallRules: [{078AF75F-C2BB-44F7-894B-233BEEEDE903}] => (Block) C:\program files (x86)\netgear genie\bin\netgeargenie.exe
FirewallRules: [{B1156D57-3F19-498B-AE62-03A878A7C9EA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{49820537-6DE7-478C-84C0-95C8F9571DCF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9173F259-33C3-457E-B607-F10A258A1885}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{449FF458-CD0D-4F9E-AC51-29B03CFD330B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{AC583BD5-855E-40F8-BA34-33C2BBC60DEA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{EFA17D7D-D583-426A-86EE-5F99DBBCDCF9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B65CC774-3E9E-4DCF-901E-3CB071E02290}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{24F87DC1-987B-48FF-B273-0879AB46A1D9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

==================== Restore Points =========================

18-12-2015 18:16:41 Windows Update
20-12-2015 19:16:19 Windows Backup
23-12-2015 07:13:35 Windows Modules Installer
28-12-2015 09:00:27 Windows Backup
28-12-2015 22:44:58 JRT Pre-Junkware Removal

==================== Faulty Device Manager Devices =============

Name: Standard PS/2 Keyboard
Description: Standard PS/2 Keyboard
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard keyboards)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Microsoft PS/2 Mouse
Description: Microsoft PS/2 Mouse
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/28/2015 10:47:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: LVPrcSrv.exe, version: 13.0.1774.0, time stamp: 0x4be4c07a
Faulting module name: LVPrcSrv.exe, version: 13.0.1774.0, time stamp: 0x4be4c07a
Exception code: 0xc0000005
Fault offset: 0x000000000000be1b
Faulting process id: 0xbcc
Faulting application start time: 0xLVPrcSrv.exe0
Faulting application path: LVPrcSrv.exe1
Faulting module path: LVPrcSrv.exe2
Report Id: LVPrcSrv.exe3
Faulting package full name: LVPrcSrv.exe4
Faulting package-relative application ID: LVPrcSrv.exe5

Error: (12/28/2015 10:45:20 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.

Error: (12/28/2015 10:37:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: HPNetworkCommunicator.exe, version: 28.0.989.0, time stamp: 0x4fa98fe9
Faulting module name: ntdll.dll, version: 10.0.10586.20, time stamp: 0x56540c3b
Exception code: 0xc0000005
Fault offset: 0x00000000000168d2
Faulting process id: 0x2f4
Faulting application start time: 0xHPNetworkCommunicator.exe0
Faulting application path: HPNetworkCommunicator.exe1
Faulting module path: HPNetworkCommunicator.exe2
Report Id: HPNetworkCommunicator.exe3
Faulting package full name: HPNetworkCommunicator.exe4
Faulting package-relative application ID: HPNetworkCommunicator.exe5

Error: (12/28/2015 10:37:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: HPNetworkCommunicator.exe, version: 28.0.989.0, time stamp: 0x4fa98fe9
Faulting module name: ntdll.dll, version: 10.0.10586.20, time stamp: 0x56540c3b
Exception code: 0xc0000005
Fault offset: 0x00000000000168d2
Faulting process id: 0x70c
Faulting application start time: 0xHPNetworkCommunicator.exe0
Faulting application path: HPNetworkCommunicator.exe1
Faulting module path: HPNetworkCommunicator.exe2
Report Id: HPNetworkCommunicator.exe3
Faulting package full name: HPNetworkCommunicator.exe4
Faulting package-relative application ID: HPNetworkCommunicator.exe5

Error: (12/28/2015 10:03:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Owner-PC)
Description: Activation of app Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe:MicrosoftEdge.AppX9zvsr9qeth9e9a03yr0g7rpdrcrwgn5r.mca failed with error: -2144927149 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (12/28/2015 09:37:02 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Owner-PC)
Description: Activation of app Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe:MicrosoftEdge.AppX9zvsr9qeth9e9a03yr0g7rpdrcrwgn5r.mca failed with error: -2144927149 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (12/28/2015 09:19:02 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Owner-PC)
Description: Activation of app Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe:MicrosoftEdge.AppX9zvsr9qeth9e9a03yr0g7rpdrcrwgn5r.mca failed with error: -2144927149 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (12/28/2015 06:48:18 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8

Error: (12/28/2015 06:37:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: HPNetworkCommunicator.exe, version: 28.0.989.0, time stamp: 0x4fa98fe9
Faulting module name: ntdll.dll, version: 10.0.10586.20, time stamp: 0x56540c3b
Exception code: 0xc0000005
Fault offset: 0x00000000000168d2
Faulting process id: 0x6bc
Faulting application start time: 0xHPNetworkCommunicator.exe0
Faulting application path: HPNetworkCommunicator.exe1
Faulting module path: HPNetworkCommunicator.exe2
Report Id: HPNetworkCommunicator.exe3
Faulting package full name: HPNetworkCommunicator.exe4
Faulting package-relative application ID: HPNetworkCommunicator.exe5

Error: (12/28/2015 06:37:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: HPNetworkCommunicator.exe, version: 28.0.989.0, time stamp: 0x4fa98fe9
Faulting module name: ntdll.dll, version: 10.0.10586.20, time stamp: 0x56540c3b
Exception code: 0xc0000005
Fault offset: 0x00000000000168d2
Faulting process id: 0x1cfc
Faulting application start time: 0xHPNetworkCommunicator.exe0
Faulting application path: HPNetworkCommunicator.exe1
Faulting module path: HPNetworkCommunicator.exe2
Report Id: HPNetworkCommunicator.exe3
Faulting package full name: HPNetworkCommunicator.exe4
Faulting package-relative application ID: HPNetworkCommunicator.exe5


System errors:
=============
Error: (12/28/2015 10:47:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Process Monitor service terminated unexpectedly. It has done this 1 time(s).

Error: (12/28/2015 10:40:06 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Apple Mobile Device Service service failed to start due to the following error:
%%1053

Error: (12/28/2015 10:40:06 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the BingDesktopUpdate service to connect.

Error: (12/28/2015 10:40:05 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Apple Mobile Device Service service to connect.

Error: (12/28/2015 10:38:58 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The User Data Access_4ec3e service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (12/28/2015 10:38:58 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The User Data Storage_4ec3e service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (12/28/2015 10:38:58 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Contact Data_4ec3e service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (12/28/2015 10:38:58 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Sync Host_4ec3e service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (12/28/2015 10:38:55 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error:
%%1056

Error: (12/28/2015 10:38:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The BBUpdate service terminated unexpectedly. It has done this 1 time(s).


CodeIntegrity:
===================================
Date: 2015-12-23 08:27:46.132
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-12-19 03:33:21.882
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-12-17 19:32:57.392
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-17 19:32:57.251
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-17 19:32:54.704
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-17 19:32:54.614
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-16 20:47:01.427
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-16 20:47:01.354
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-16 20:47:01.275
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-16 20:47:01.200
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

Processor: AMD Phenom(tm) II X4 810 Processor
Percentage of memory in use: 25%
Total physical RAM: 7935.3 MB
Available physical RAM: 5903.96 MB
Total Virtual: 15871.3 MB
Available Virtual: 13820.38 MB

==================== Drives ================================

Drive c: (Gateway) (Fixed) (Total:919.41 GB) (Free:788.21 GB) NTFS
Drive j: (Elements) (Fixed) (Total:931.51 GB) (Free:0.01 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 1A6A07CA)
Partition 1: (Not Active) - (Size=12 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=919.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 00021631)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================
huskyrog
Active Member
 
Posts: 7
Joined: December 26th, 2015, 2:29 pm

Re: FaceBook reward wheel, spin the lucky wheel will not go

Unread postby huskyrog » December 29th, 2015, 12:25 am

Running good so far!!! Will report again in the morning and hopefully will be malware free...thank you so much.
huskyrog
Active Member
 
Posts: 7
Joined: December 26th, 2015, 2:29 pm

Re: FaceBook reward wheel, spin the lucky wheel will not go

Unread postby capnkrunch » December 29th, 2015, 6:01 am

Hello huskyrog :)

huskyrog wrote:Running good so far!!! Will report again in the morning and hopefully will be malware free...thank you so much.

You're very welcome. Glad to hear that things are running better now. However, we are not finished yet so please stick with me until I give you the All Clean.

Step one...

It looks like JRT was run but you did not post the log. It should be a file named JRT.txt located on your Desktop. Please copy and paste the contents in your reply.

Step two...

Please answer these questions:

ProxyServer: [S-1-5-21-3901721066-3880018567-3824620293-1000] => 24.241.122.94:80

Are you aware of this proxy? Did you set it yourself?

It looks like there are still programs disabled with MSConfig. Were you able to do Step two from my previous post (Reenable Items With MSConfig)? MSConfig is meant for troubleshooting problems with booting, not as a permanent solution for managing startup programs so it is important that we reenable these items.

Step three...

FRST Fix
  • You should still have FRST64.exe in your Downloads folder. If not please download it HERE.
  • Press the Windows Key + R.
  • Type notepad.exe into the text box and click OK.
  • A blank Notepad page should open.
    • Copy and Paste the following script into Notepad, Do not include the words Code: Select all.
    • (Click the Select all button next to Code: to select the entire script).
    Code: Select all
    CreateRestorePoint:
    HKLM-x32\...\Run: [] => [X]
    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
    HKU\S-1-5-21-3901721066-3880018567-3824620293-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
    BHO: No Name -> {57434C32-2D53-5000-76A7-7A786E7484D7} -> No File
    BHO: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> C:\ProgramData\WRData\pkg\LPBar64.dll => No File
    BHO-x32: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No File
    BHO-x32: No Name -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> No File
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll => No File
    Toolbar: HKLM - No Name - {97ab88ef-346b-4179-a0b1-7445896547a5} - No File
    Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
    Toolbar: HKLM - No Name - {57434C32-2D53-5000-76A7-7A786E7484D7} - No File
    Toolbar: HKLM-x32 - No Name - {97ab88ef-346b-4179-a0b1-7445896547a5} - No File
    FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_37 -> C:\Windows\SysWOW64\npdeployJava1.dll [2012-09-24] (Sun Microsystems, Inc.)
    FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-03] [not signed]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-28]
    2015-12-16 03:22 - 2014-03-01 09:11 - 00002502 _____ C:\WINDOWS\System32\Tasks\{E056D996-F92F-4D3A-A0D5-ACD05D0714EA}
    2015-12-16 03:22 - 2014-02-18 22:21 - 00002436 _____ C:\WINDOWS\System32\Tasks\{D4519B58-B14C-42BA-8278-A94905EC0332}
    2015-12-16 03:22 - 2012-04-11 19:07 - 00002854 _____ C:\WINDOWS\System32\Tasks\Ad-Aware Update (Weekly)
    2015-12-16 03:21 - 2014-03-01 09:27 - 00002292 _____ C:\WINDOWS\System32\Tasks\{770BF445-099A-4FF4-A2FA-7B4D9321B43B}
    2015-12-16 03:21 - 2014-02-26 05:32 - 00002438 _____ C:\WINDOWS\System32\Tasks\{59F2B270-2CF1-44B2-86A3-66FEE7B6D90A}
    2015-12-16 03:21 - 2014-02-23 22:37 - 00002366 _____ C:\WINDOWS\System32\Tasks\{487217B0-F80F-428C-852A-1295EBAB4602}
    2015-12-16 03:21 - 2014-02-18 22:58 - 00002436 _____ C:\WINDOWS\System32\Tasks\{2D6133B4-5B67-41D5-B1E3-3FDB135CDC8A}
    2015-12-16 03:21 - 2013-12-28 16:47 - 00002428 _____ C:\WINDOWS\System32\Tasks\{D807633C-F175-4D5E-8BAF-4A218E7C774F}
    2015-12-16 03:21 - 2012-05-12 22:45 - 00003482 _____ C:\WINDOWS\System32\Tasks\Ad-Aware Antivirus Scheduled Scan
    Task: {04FC2721-D653-4C19-A1EB-4F0B7623C94F} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
    Task: {1727757D-45DD-4E9A-A62B-75F35EF33C97} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
    Task: {2FDBDF17-7B91-41F3-9DE1-0627AD80E320} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
    Task: {3A9B3EFC-C1C2-4C39-90A0-00DB74F9E527} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
    Task: {3D728765-1B06-48FD-BBB0-A3EEB5FBF514} - System32\Tasks\{770BF445-099A-4FF4-A2FA-7B4D9321B43B} => pcalua.exe -a C:\Users\Owner\Downloads\Adaware_Installer.exe -d C:\Users\Owner\Downloads
    Task: {3E0BEE3D-AB44-4EFB-8217-F02A5B37F0C2} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
    Task: {4F79E27F-5C46-4699-943E-CC333ACBBA1D} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
    Task: {506E8F7D-1BFA-42C1-B6AC-F0D884605B9C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
    Task: {538174DB-5D2A-45F8-A9C2-12C4151E1AFF} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
    Task: {6BB340D6-5BF6-441E-9C7D-8AC50718E6DD} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
    Task: {74EB781C-6412-40E2-A208-91CC72E7BDE4} - System32\Tasks\{59F2B270-2CF1-44B2-86A3-66FEE7B6D90A} => pcalua.exe -a "C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CVIPMBGT\Adaware_Installer_free.exe" -d C:\Users\Owner\Desktop
    Task: {851A1365-DEA0-47DE-9C83-D5C4947545AD} - System32\Tasks\{487217B0-F80F-428C-852A-1295EBAB4602} => pcalua.exe -a C:\Users\Owner\Downloads\4d9c38ed-5cb0-439b-acec-6573e3bef688_Adaware_Installer.exe -d C:\Users\Owner\Downloads
    Task: {9E4344F6-AB9F-4D42-A8F6-2B1AA876E8DC} - System32\Tasks\{D807633C-F175-4D5E-8BAF-4A218E7C774F} => pcalua.exe -a "C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PYRGJYBT\Adaware_Installer.exe" -d C:\Users\Owner\Desktop
    Task: {A1068E25-D7E3-442B-B9AF-0A0D5874F73F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
    Task: {A6245D91-5CED-47BE-AA72-9A7059A218AA} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\AD-AWA~1\AdAwareLauncher.exe
    Task: {C4E23441-63F7-4FA2-8ECC-C3506742EE27} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
    Task: {C4E23441-63F7-4FA2-8ECC-C3506742EE27} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
    Task: {D731CEC4-42D3-4508-AF73-5F298A143923} - System32\Tasks\{E056D996-F92F-4D3A-A0D5-ACD05D0714EA} => pcalua.exe -a "C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PYRGJYBT\4d9c38ed-5cb0-439b-acec-6573e3bef688_Adaware_Installer.exe" -d C:\Users\Owner\Desktop
    Task: {E6E587DB-D3B8-4760-B372-9382BCC38259} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
    Task: {F68D32E7-9DAC-4B77-AE9C-F973619CC31B} - System32\Tasks\{D4519B58-B14C-42BA-8278-A94905EC0332} => pcalua.exe -a "C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3B0GYP62\Adaware_Installer (1).exe" -d C:\Users\Owner\Desktop
    
    C:\ProgramData\WRData
    C:\Program Files (x86)\Java
    C:\Users\Owner\Downloads\4d9c38ed-5cb0-439b-acec-6573e3bef688_Adaware_Installer.exe
    C:\PROGRA~2\AD-AWA~1
    C:\Program Files (x86)\Lavasoft
    
    Folder: C:\Users\Owner\AppData\Local\{0BE3CD94-84FC-40EF-B97B-ABED9326EC5C}
    Hosts:
    EmptyTemp:
    CMD: ipconfig /flushdns
  • Save it next to FRST64.exe as fixlist.txt.
    Important! fixlist.txt must be saved in the same directory as FRST64.exe to work.
  • Right click on FRST64.exe and select Run as administrator.
  • Press the Fix button one time only and wait.
  • When FRST finishes you will be prompted to reboot your computer. Click OK.
  • Your computer should now restart. On reboot navigate to your Downloads folder where there you should find Fixlog.txt. Copy and paste the contents in your reply.

Step four...

SystemLook Scan
  • Please download SystemLook by jpshortstuff and save it to your Desktop.
  • Right click SystemLook_x64.exe and select Run as administrator.
  • Copy and Paste the following script into the main textbox.
    • Do not include the words Code: Select all.
    • (Click the Select all button next to Code: to select the entire script).
    Code: Select all
    :filefind
    *Fun4IM*
    *Bandoo*
    *Searchnu*
    *Searchqu*
    *iLivid*
    *whitesmoke*
    *datamngr*
    *trolltech*
    
    :folderfind
    *Fun4IM*
    *Bandoo*
    *Searchnu*
    *Searchqu*
    *iLivid*
    *whitesmoke*
    *datamngr*
    *trolltech*
    
    :Regfind
    Fun4IM
    Bandoo
    Searchnu
    Searchqu
    iLivid
    whitesmoke
    datamngr
    kelkoopartners
    trolltech
    
  • Click the Look button to start the scan.
    Because of the Registry searches, the scan may take 15 minutes or a bit more to run on a large machine. Please be patient.
  • When finished, a Notepad window will open with the results of the scan. Please copy and paste the contents in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt

Please post each log separately to prevent it being cut off by the forum post size limiter.
Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections...

In your next reply please include:
  • Did you have any problems with the instructions?
  • JRT.txt
  • Answers to my questions
  • Fixlog.txt
  • SystemLook.txt
  • Are there any changes in computer behavior?
User avatar
capnkrunch
MRU Master
MRU Master
 
Posts: 793
Joined: March 20th, 2015, 6:41 pm
Location: Chicago

Re: FaceBook reward wheel, spin the lucky wheel will not go

Unread postby capnkrunch » December 31st, 2015, 6:32 am

Hello huskyrog :)

It has been 48 hours since my last post.
  • Do you still need help?
  • Do you need more time?
    Are you having problems following my instructions?
  • According to Malware Removal's latest policy, topics can be closed after 3 days without a response.
  • If you do not reply within the next 24 hours, this topic will be closed.

We still have some work to do so please keep in mind what I said in my first post:
capnkrunch wrote:Remember, absence of symptoms does mean the infection is all gone.
User avatar
capnkrunch
MRU Master
MRU Master
 
Posts: 793
Joined: March 20th, 2015, 6:41 pm
Location: Chicago

Re: FaceBook reward wheel, spin the lucky wheel will not go

Unread postby Gary R » January 1st, 2016, 9:33 am

Due to a lack of response, this topic is now closed.

If you still require help, please open a new thread in the Infected? Virus, malware, adware, ransomware, oh my! forum, include a fresh FRST log, and wait for a new helper.
User avatar
Gary R
Administrator
Administrator
 
Posts: 25888
Joined: June 28th, 2005, 11:36 am
Location: Yorkshire
Advertisement
Register to Remove


Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 291 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware