Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. 
Join 
This topic is locked
This started because some flash games in Pogo won't load (and I can't get in touch with them). In IE, one flash game starts to load, then a white screen with a black square in the top left, then nothing. Another flash game will load, however. Neither of these games will load in Firefox. Updated Java and Flash, cleared all Flash cache, disabled and reenabled flash cache in IE but nothing changes. Tried going in Windows Update to check for updates and I get an error when clicking Check for Updates, that the service is not running, but when I go to services.msc, it IS running and I even restarted it, but same error in Windows Updates. Ran Spybot and Malwarebytes but still no change. Thanks. Oh, yes, these games run fine on a different PC, and they did work last week.
aswMBR version 1.0.1.2252 Copyright© 2014 AVAST Software
Run date: 2018-07-25 17:24:02
-----------------------------
17:24:02.561 OS Version: Windows 6.1.7601 Service Pack 1
17:24:02.561 Number of processors: 2 586 0xF02
17:24:02.577 ComputerName: KELLY-PC UserName: Kelly
17:24:14.280 Initialize success
17:24:14.342 VM: initialized successfully
17:24:14.342 VM: Intel CPU BiosDisabled
17:24:14.514 write error "aswCmnB.dll". The process cannot access the file because it is being used by another process.
17:39:02.593 AVAST engine defs: 17030301
17:39:42.984 Disk 0 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2
17:39:43.000 Disk 0 Vendor: ST3750640NS 3CNR Size: 715404MB BusType: 3
17:39:43.000 Disk 1 (boot) \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T0L0-0
17:39:43.000 Disk 1 Vendor: Samsung_SSD_840_EVO_120GB EXT0AB0Q Size: 114473MB BusType: 3
17:39:43.015 Disk 1 MBR read successfully
17:39:43.015 Disk 1 MBR scan
17:39:43.246 Disk 1 Windows 7 default MBR code
17:39:43.246 Disk 1 Partition 1 80 (A) 07 HPFS/NTFS NTFS 150 MB offset 2048
17:39:43.246 Disk 1 default boot code
17:39:43.261 Disk 1 Partition 2 00 07 HPFS/NTFS NTFS 114322 MB offset 309267
17:39:43.292 Disk 1 scanning sectors +234441648
17:39:43.308 Disk 1 scanning C:\Windows\system32\drivers
17:39:53.726 Service scanning
17:40:11.902 Modules scanning
17:40:11.902 Disk 1 trace - called modules:
17:40:11.917 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS intelide.sys PCIIDEX.SYS atapi.sys dxgkrnl.sys igdkmd32.sys dxgmms1.sys
17:40:11.917 1 nt!IofCallDriver -> \Device\Harddisk1\DR1[0x865c0030]
17:40:11.933 3 CLASSPNP.SYS[8bc0459e] -> nt!IofCallDriver -> [0x860df918]
17:40:11.933 5 ACPI.sys[8b4453e4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x857b7908]
17:40:12.245 AVAST engine scan C:\Windows
17:40:14.135 AVAST engine scan C:\Windows\system32
17:40:25.729 File: C:\Windows\system32\csrsrv.dll **INFECTED** Win32:Aluroot-B [Rtk]
17:43:52.430 AVAST engine scan C:\Windows\system32\drivers
17:44:03.317 AVAST engine scan C:\Users\Kelly
17:59:36.366 AVAST engine scan C:\ProgramData
18:02:49.298 Disk 1 statistics 3411573/0/0 @ 11.29 MB/s
18:02:49.310 Scan finished successfully
18:07:44.356 Disk 1 MBR has been saved successfully to "C:\Users\Kelly\Desktop\MBR.dat"
18:07:44.581 The log file has been saved successfully to "C:\Users\Kelly\Desktop\aswMBR.txt"
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21.07.2018
Ran by Kelly (administrator) on KELLY-PC (25-07-2018 18:12:13)
Running from C:\Users\Kelly\Desktop
Loaded Profiles: Kelly (Available Profiles: Kelly)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Acronis) C:\Program Files\Acronis\TrueImageWorkstation\TrueImageMonitor.exe
(Acronis) C:\Program Files\Acronis\TrueImageWorkstation\TimounterMonitor.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
() C:\Program Files\Hostless Modem\Mobile Hotspot Admin\CheckNDISPort_df.exe
() C:\Program Files\Hostless Modem\Mobile Hotspot Admin\CancelAutoPlay_df.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
() C:\Program Files\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\TrayTipAgentE.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Paramount Software UK Ltd) C:\Program Files\Macrium\Common\MacriumService.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Realtek) C:\Program Files\Realtek\USB Wireless LAN Utility\RtlService.exe
() C:\Windows\runSW.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\USB Wireless LAN Utility\RtWLan.exe
(OLYMPUS IMAGING CORP.) C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Realtek) C:\Windows\SwUSB.exe
(Mobile Stream) C:\Program Files\Mobile Stream\EasyTether\easytthr.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(Nico Mak Computing) C:\Program Files\WinZip\WZUpdateNotifier.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Nico Mak Computing) C:\Program Files\WinZip\FAHWindow32.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Modos Inc.) C:\Users\Kelly\Documents\KeyboardIndicator\KeyboardIndicator.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsserv.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer.exe
(Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdagent.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\tv_w32.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(HP Inc.) C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(HP Inc.) C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_30_0_0_134_ActiveX.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6183456 2008-06-13] (Realtek Semiconductor)
HKLM\...\Run: [TrueImageMonitor.exe] => C:\Program Files\Acronis\TrueImageWorkstation\TrueImageMonitor.exe [1129232 2007-01-31] (Acronis)
HKLM\...\Run: [AcronisTimounterMonitor] => C:\Program Files\Acronis\TrueImageWorkstation\TimounterMonitor.exe [1862112 2007-01-31] (Acronis)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [140832 2007-01-31] (Acronis)
HKLM\...\Run: [OV3_Monitor] => C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe [55656 2013-07-29] (OLYMPUS IMAGING CORP.)
HKLM\...\Run: [CheckNDISPortf0ac3e] => C:\Program Files\Hostless Modem\Mobile Hotspot Admin\CheckNDISPort_df.exe [465664 2014-03-26] ()
HKLM\...\Run: [CancelAutoPlay_df] => C:\Program Files\Hostless Modem\Mobile Hotspot Admin\CancelAutoPlay_df.exe [446720 2014-03-26] ()
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [2312824 2015-08-25] (Logitech, Inc.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [EaseUS EPM Tray Agent] => C:\Program Files\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\TrayTipAgentE.exe [255072 2014-11-18] ()
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [601424 2018-07-07] (Oracle Corporation)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [6788032 2018-04-20] (Safer-Networking Ltd.)
HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\Run: [OV3_Monitor] => C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe [420200 2013-07-29] (OLYMPUS IMAGING CORP.)
HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\Run: [QuickenScheduledUpdates] => C:\Program Files\Quicken\bagent.exe [77216 2018-06-13] (Quicken Inc.)
HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\Run: [EasyTether] => C:\Program Files\Mobile Stream\EasyTether\easytthr.exe [62464 2015-11-22] (Mobile Stream)
HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [221184 2010-11-20] (Microsoft Corporation)
Lsa: [Authentication Packages] msv1_0 relog_ap
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FAH.lnk [2016-03-04]
ShortcutTarget: FAH.lnk -> C:\Program Files\WinZip\FAHConsole.exe (Nico Mak Computing)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2013-10-05]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2013-08-10]
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Update Notifier.lnk [2016-03-04]
ShortcutTarget: Update Notifier.lnk -> C:\Program Files\WinZip\WZUpdateNotifier.exe (Nico Mak Computing)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Preloader.lnk [2016-03-04]
ShortcutTarget: WinZip Preloader.lnk -> C:\Program Files\WinZip\WzPreloader.exe (WinZip Computing, S.L.)
Startup: C:\Users\Kelly\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\KeyboardIndicator.exe - Shortcut.lnk [2016-03-05]
ShortcutTarget: KeyboardIndicator.exe - Shortcut.lnk -> C:\Users\Kelly\Documents\KeyboardIndicator\KeyboardIndicator.exe (Modos Inc.)
Startup: C:\Users\Kelly\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Ink Alerts - HP DeskJet 2130 series.lnk [2018-07-25]
ShortcutTarget: Monitor Ink Alerts - HP DeskJet 2130 series.lnk -> C:\Program Files\HP\HP DeskJet 2130 series\Bin\HPStatusBL.dll (Hewlett-Packard Development Company, LP)
BootExecute: autocheck autochk * sdnclean.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{13C13B63-E31B-4BD8-9090-B08648E77768}: [DhcpNameServer] 192.168.117.1
Tcpip\..\Interfaces\{4B9ACEAC-D5A7-4F2A-9C34-F32FBB654844}: [DhcpNameServer] 192.168.0.1 192.168.0.1
Tcpip\..\Interfaces\{7D8320DE-B1C5-48CA-8137-74E02E1F3A05}: [DhcpNameServer] 192.168.254.254
Tcpip\..\Interfaces\{E31D585E-87F2-44AC-ABF3-F848BEE1AD85}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{E3DD0B0B-2050-4680-958F-F69FF4F3794F}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {0211C569-4404-4B6D-AD63-33EDFE483EF2} URL =
SearchScopes: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000 -> DefaultScope {DBE1494B-8461-403F-9DB0-E3A56FA6416E} URL = hxxps://search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000 -> {d392d18d-fa5b-480d-80a5-c1adbfa4ef0c} URL = hxxp://isearch.shopathome.com?user_id={d7b90a99-560d-4ec2-b9dd-eff11a1c3c5b}&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000 -> {DBE1494B-8461-403F-9DB0-E3A56FA6416E} URL = hxxps://search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22] (Hewlett-Packard Co.)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_181\bin\ssv.dll [2018-07-23] (Oracle Corporation)
BHO: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-25] (Logitech, Inc.)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_181\bin\jp2ssv.dll [2018-07-23] (Oracle Corporation)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22] (Hewlett-Packard Co.)
Toolbar: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
Toolbar: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000 -> No Name - {4F524A2D-5637-4300-76A7-7A786E7484D7} - No File
FireFox:
========
FF DefaultProfile: tjtyx2lb.default
FF ProfilePath: C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\tjtyx2lb.default [2018-07-24]
FF Homepage: Mozilla\Firefox\Profiles\tjtyx2lb.default -> hxxp://www.pogo.com/
FF Extension: (WebCompat Reporter) - C:\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi [2018-07-03] [Legacy] [not signed]
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\17.3.1.204 => not found
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-10-05] [Legacy] [not signed]
FF HKLM\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2016-03-08] [Legacy] [not signed]
FF HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_30_0_0_134.dll [2018-07-23] ()
FF Plugin: @java.com/DTPlugin,version=11.181.2 -> C:\Program Files\Java\jre1.8.0_181\bin\dtplugin\npDeployJava1.dll [2018-07-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.181.2 -> C:\Program Files\Java\jre1.8.0_181\bin\plugin2\npjp2.dll [2018-07-23] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-09-22] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-06-29] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR DefaultSearchURL: Default -> hxxp://www.search.ask.com/web?q={searchTerms}
CHR DefaultSearchKeyword: Default -> search.ask.com
CHR DefaultSuggestURL: Default -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
CHR Profile: C:\Users\Kelly\AppData\Local\Google\Chrome\User Data\Default [2018-07-25]
CHR Extension: (Web Search) - C:\Users\Kelly\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfnnfiebbgkalehajmdpddmebpfgpbea [2018-04-20]
CHR Extension: (Piggy - Automatic Coupons & Cash Back) - C:\Users\Kelly\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfapbcheiepjppjbnkphkmegjlipojba [2018-07-18]
CHR Extension: (Skype) - C:\Users\Kelly\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2017-12-02]
CHR Extension: (Finderito) - C:\Users\Kelly\AppData\Local\Google\Chrome\User Data\Default\Extensions\napamiahlfhmljabgaehlmcnknhjnbdb [2018-06-19]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Kelly\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Chrome Media Router) - C:\Users\Kelly\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-17]
CHR HKLM\...\Chrome\Extension: [commhkacjheiacaopdonmodahaoadoln] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gihfmmedoddijgnhkgfgnkeohkpbipol] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AcronisOSSReinstallSvc; C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe [2217416 2007-02-22] ()
R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [407072 2007-01-31] (Acronis)
R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [333688 2018-06-13] (HP Inc.)
R2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-21] (HP Inc.)
R2 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [3139328 2017-10-19] (Paramount Software UK Ltd)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4753104 2018-05-09] (Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44544 2008-12-03] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-12-03] (Hewlett-Packard) [File not signed]
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1275776 2018-05-16] (Bitdefender)
R2 RealtekWlanU; C:\Program Files\Realtek\USB Wireless LAN Utility\RtlService.exe [48856 2014-05-19] (Realtek)
S2 RTLDHCPService; C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe [262360 2014-04-23] (Realtek)
R2 RunSwUSB; C:\Windows\runSW.exe [44760 2014-12-12] ()
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3892256 2018-04-20] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [3943664 2018-04-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [233712 2018-02-06] (Safer-Networking Ltd.)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-15] (DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [7757552 2018-02-26] (TeamViewer GmbH)
R2 updatesrv; C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe [236208 2018-06-06] (Bitdefender)
R2 vsserv; C:\Program Files\Bitdefender Antivirus Free\vsserv.exe [236208 2018-06-06] (Bitdefender)
R2 vsservppl; C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe [236208 2018-06-06] (Bitdefender)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 atc; C:\Windows\System32\DRIVERS\atc.sys [1010256 2018-06-06] (BitDefender S.R.L. Bucharest, ROMANIA)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1419144 2018-05-11] (BitDefender)
R0 BdDci; C:\Windows\System32\DRIVERS\bddci.sys [126056 2018-05-11] (Bitdefender)
R3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [109456 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 easytether; C:\Windows\System32\DRIVERS\easytthr.sys [18632 2015-11-22] (Mobile Stream)
R3 edrsensor; C:\Windows\System32\DRIVERS\edrsensor.sys [208216 2018-05-11] (BitDefender S.R.L. Bucharest, ROMANIA)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [21496 2016-01-14] ()
R0 EPMVolFlt; C:\Windows\System32\drivers\EPMVolFlt.sys [17736 2017-11-23] (Windows ® Codename Longhorn DDK provider)
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10208 2016-07-11] () [File not signed]
R0 gzflt; C:\Windows\System32\drivers\gzflt.sys [157256 2018-06-29] (BitDefender LLC)
R3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [52368 2015-06-17] (Logitech, Inc.)
R3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [20240 2015-06-17] (Logitech, Inc.)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [220896 2018-07-25] (Malwarebytes)
R0 pssnap; C:\Windows\System32\DRIVERS\pssnap.sys [16016 2015-10-12] (Windows ® Win 7 DDK provider)
R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [2928856 2015-12-28] (Realtek Semiconductor Corporation )
R3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [147344 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [11232 2017-09-22] ()
R2 tifsfilter; C:\Windows\System32\DRIVERS\tifsfilt.sys [39712 2013-08-12] (Acronis)
R2 trufos; C:\Windows\System32\drivers\trufos.sys [520816 2018-05-11] (Bitdefender)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [15872 2013-02-11] (Microsoft Corporation)
U3 aswMBR; \??\C:\Users\Kelly\AppData\Local\Temp\aswMBR.sys [X] <==== ATTENTION
U3 aswVmm; \??\C:\Users\Kelly\AppData\Local\Temp\aswVmm.sys [X] <==== ATTENTION
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-07-25 18:12 - 2018-07-25 18:12 - 000022572 _____ C:\Users\Kelly\Desktop\FRST.txt
2018-07-25 18:10 - 2018-07-25 18:12 - 000000000 ____D C:\FRST
2018-07-25 18:09 - 2018-07-25 18:09 - 001773056 _____ (Farbar) C:\Users\Kelly\Desktop\FRST.exe
2018-07-25 18:07 - 2018-07-25 18:07 - 000002571 _____ C:\Users\Kelly\Desktop\aswMBR.txt
2018-07-25 18:07 - 2018-07-25 18:07 - 000000512 _____ C:\Users\Kelly\Desktop\MBR.dat
2018-07-25 17:22 - 2018-07-25 17:23 - 005198336 _____ (AVAST Software) C:\Users\Kelly\Desktop\aswMBR.exe
2018-07-25 17:10 - 2018-07-25 17:10 - 000220896 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-07-24 08:38 - 2017-09-22 20:04 - 000000828 _____ C:\Windows\system32\Drivers\etc\hosts.20180724-083826.backup
2018-07-23 20:47 - 2018-07-23 20:47 - 000002142 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2018-07-23 20:47 - 2018-07-23 20:47 - 000002130 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2018-07-23 20:47 - 2018-07-23 20:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2018-07-23 20:46 - 2018-07-25 17:09 - 000000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2018-07-23 20:46 - 2018-07-24 08:33 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2018-07-23 20:46 - 2018-02-06 17:50 - 000030056 _____ (Safer-Networking Ltd.) C:\Windows\system32\sdnclean.exe
2018-07-23 20:42 - 2018-07-23 20:43 - 069910960 _____ (Safer-Networking Ltd. ) C:\Users\Kelly\Downloads\spybotsd-2.7.64.0.exe
2018-07-23 20:31 - 2018-07-24 16:25 - 000000000 ____D C:\Users\Kelly\AppData\LocalLow\Mozilla
2018-07-23 20:31 - 2018-07-23 20:35 - 000000000 ____D C:\Users\Kelly\AppData\Local\Mozilla
2018-07-23 20:31 - 2018-07-23 20:31 - 000001128 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-07-23 20:31 - 2018-07-23 20:31 - 000001116 _____ C:\Users\Public\Desktop\Firefox.lnk
2018-07-23 20:31 - 2018-07-23 20:31 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2018-07-23 20:31 - 2018-07-23 20:31 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-07-23 20:25 - 2018-07-23 20:25 - 000000000 ____D C:\Program Files\Common Files\Oracle
2018-07-23 20:24 - 2018-07-23 20:24 - 000000000 ____D C:\Program Files\Common Files\Java
2018-07-12 17:01 - 2018-07-12 17:01 - 000145776 _____ C:\Windows\Minidump\071218-11296-01.dmp
2018-07-06 09:17 - 2018-07-06 09:17 - 000029078 _____ C:\ProgramData\agent.update.1530893835.bdinstall.bin
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-07-25 17:40 - 2017-09-22 20:12 - 000000000 ____D C:\Program Files\Bitdefender Antivirus Free
2018-07-25 17:22 - 2015-02-13 18:10 - 000016384 _____ C:\Users\Kelly\Documents\UserId.xls
2018-07-25 17:20 - 2009-07-13 21:34 - 000021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-07-25 17:20 - 2009-07-13 21:34 - 000021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-07-25 17:16 - 2010-11-20 14:01 - 000782578 _____ C:\Windows\system32\PerfStringBackup.INI
2018-07-25 17:16 - 2009-07-13 19:37 - 000000000 ____D C:\Windows\inf
2018-07-25 17:09 - 2018-02-11 19:24 - 000000320 _____ C:\Windows\Tasks\HPCeeScheduleForKelly.job
2018-07-25 17:09 - 2015-04-03 22:05 - 000000000 ____D C:\Program Files\Java
2018-07-25 17:09 - 2009-07-13 21:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-07-23 20:34 - 2015-04-19 17:17 - 000842240 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2018-07-23 20:34 - 2015-04-19 17:17 - 000175104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2018-07-23 20:34 - 2013-08-26 19:28 - 000000000 ____D C:\Users\Kelly\AppData\Local\Adobe
2018-07-23 20:34 - 2013-08-10 17:09 - 000000000 ____D C:\Windows\system32\Macromed
2018-07-23 20:31 - 2013-08-11 17:44 - 000000000 ____D C:\Users\Kelly\AppData\Roaming\Mozilla
2018-07-23 20:28 - 2013-08-13 14:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail
2018-07-23 20:25 - 2015-04-03 22:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-07-23 20:23 - 2015-04-03 22:06 - 000096632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2018-07-12 17:01 - 2016-05-03 20:46 - 1067922273 _____ C:\Windows\MEMORY.DMP
2018-07-12 17:01 - 2016-05-03 20:46 - 000000000 ____D C:\Windows\Minidump
2018-07-12 09:30 - 2013-08-06 20:32 - 000000000 ____D C:\Program Files\TeamViewer
2018-07-11 11:10 - 2016-03-13 17:08 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-07-11 06:31 - 2018-06-14 09:14 - 000000000 ____D C:\ProgramData\BDLogging
2018-07-10 18:01 - 2018-06-17 10:55 - 000129248 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae.sys
2018-07-10 17:20 - 2013-08-10 13:28 - 000000000 ____D C:\Users\Kelly\Documents\Quicken
2018-07-06 09:17 - 2017-09-22 20:06 - 000000000 ____D C:\Program Files\Bitdefender Agent
2018-06-29 07:30 - 2017-09-22 20:20 - 000157256 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2018-06-26 21:58 - 2015-06-02 09:21 - 000000000 ____D C:\Users\Kelly\Documents\Envelopes
2018-06-26 13:55 - 2015-03-14 15:27 - 000002177 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
==================== Files in the root of some directories =======
2013-08-11 17:48 - 2014-06-09 15:57 - 000198512 _____ () C:\Users\Kelly\Quicken 2008newOFXLOG.DAT
2013-08-11 17:48 - 2014-04-13 16:25 - 002218832 _____ () C:\Users\Kelly\Quicken 2008newOFXOLD.DAT
2016-12-01 13:59 - 2016-11-30 13:02 - 000012542 _____ () C:\Program Files\Common Files\client.wyc
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-07-17 00:55
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 21.07.2018
Ran by Kelly (25-07-2018 18:13:17)
Running from C:\Users\Kelly\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) (2013-08-07 03:26:02)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2863067232-3147982578-4033237767-500 - Administrator - Disabled)
ericjs (S-1-5-21-2863067232-3147982578-4033237767-1003 - Administrator - Enabled)
Guest (S-1-5-21-2863067232-3147982578-4033237767-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2863067232-3147982578-4033237767-1002 - Limited - Enabled)
Kelly (S-1-5-21-2863067232-3147982578-4033237767-1000 - Administrator - Enabled) => C:\Users\Kelly
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Bitdefender Antivirus Free Antimalware (Disabled - Up to date) {EA21BCE8-A461-99C3-3A0D-4C964E75494E}
AS: Spybot - Search and Destroy (Disabled - Out of date) {4C1D9672-63FE-5C90-371E-8FDA591C5B75}
AS: Bitdefender Antivirus Free Antimalware (Disabled - Up to date) {51405D0C-825B-964D-00BD-77E435F203F3}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
32 Bit HP CIO Components Installer (HKLM\...\{92127AF5-FDD8-4ADF-BC40-C356C9EE0B7D}) (Version: 6.1.1 - Hewlett-Packard) Hidden
Acronis Disk Director Suite (HKLM\...\{2300EE96-0A41-4FAB-BD03-989EC44577A0}) (Version: 10.0.2160 - Acronis)
Acronis True Image Workstation (HKLM\...\{2545228C-6A70-4A01-B936-6DA77984D298}) (Version: 9.1.3887 - Acronis)
Adobe Acrobat Reader DC (HKLM\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 18.011.20055 - Adobe Systems Incorporated)
Adobe Flash Player 30 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 30.0.0.134 - Adobe Systems Incorporated)
Adobe Flash Player 30 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 30.0.0.134 - Adobe Systems Incorporated)
Amazon Kindle (HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\Amazon Kindle) (Version: 1.14.0.43019 - Amazon)
Bejeweled 2 Deluxe® (HKLM\...\Bejeweled 2 Deluxe®) (Version: 32.0.0.0 - Shockwave.com)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 21.0.25.59 - Bitdefender)
Bitdefender Antivirus Free (HKLM\...\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}) (Version: 1.0.8.33 - Bitdefender)
BufferChm (HKLM\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
Copy (HKLM\...\{9BE466FF-70B7-4DA8-807C-DB4C3610FDAA}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Destinations (HKLM\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.77.000 - Hewlett-Packard) Hidden
DeviceDiscovery (HKLM\...\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
EaseUS Partition Master 12.8 (HKLM\...\EaseUS Partition Master_is1) (Version: - EaseUS)
EasyTether (HKLM\...\{126F8B16-3BE0-4D4F-B9DB-61B49AA793B1}) (Version: 1.3.3 - Mobile Stream) Hidden
EasyTether (HKLM\...\{6f3b40d5-c81b-469b-a7a2-b560f8561a8c}) (Version: 1.3.3 - Mobile Stream)
EasyTether ADB USB driver (HKLM\...\{D68C899F-0BEC-4C3F-897D-0F0390894D4A}) (Version: 1.0.6 - Mobile Stream)
Google Chrome (HKLM\...\Google Chrome) (Version: 67.0.3396.99 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Google Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
GPBaseService2 (HKLM\...\{BB3447F6-9553-4AA9-960E-0DB5310C5779}) (Version: 140.0.211.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP DeskJet 2130 series Basic Device Software (HKLM\...\{8BECF3A4-E3DF-4A75-BB74-C7A50443A019}) (Version: 35.0.61.54677 - Hewlett-Packard Co.)
HP DeskJet 2130 series Help (HKLM\...\{1CDFD3C9-BDF8-4DDC-BDA2-EBC53F938B5F}) (Version: 35.0.0 - Hewlett Packard)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.2024 - HP Photo Creations Powered by RocketLife)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Support Solutions Framework (HKLM\...\{F6A11738-3EE4-4573-AEA5-6CD5D491C167}) (Version: 12.9.24.3 - Hewlett-Packard Company)
HP Touchpoint Analytics Client (HKLM\...\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}) (Version: 4.0.2.1439 - HP Inc.)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPProductAssistant (HKLM\...\{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
HPSSupply (HKLM\...\{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}) (Version: 140.0.211.000 - Hewlett-Packard) Hidden
IncrediMail (HKLM\...\{35505AE1-27E2-4206-B3BF-58771803B8D0}) (Version: 6.6.0.5288 - IncrediMail) Hidden
Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
Java 8 Update 181 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180181F0}) (Version: 8.0.1810.13 - Oracle Corporation)
Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech)
Logitech Unifying Software 2.50 (HKLM\...\Logitech Unifying) (Version: 2.50.25 - Logitech)
Macrium Reflect Free Edition (HKLM\...\{EF9A9E57-9506-45D7-9C36-0ACC3341F737}) (Version: 6.3.1849 - Paramount Software (UK) Ltd.) Hidden
Macrium Reflect Free Edition (HKLM\...\MacriumReflect) (Version: 6.3 - Paramount Software (UK) Ltd.)
Malwarebytes version 3.5.1.2522 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes)
MarketResearch (HKLM\...\{D360FA88-17C8-4F14-B67F-13AAF9607B12}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Marxio Timer 1.11 (HKLM\...\Marxio Timer_is1) (Version: - marxio-tools)
Microsoft .NET Framework 4.7.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02558 - Microsoft Corporation)
Microsoft Office 2000 Premium (HKLM\...\{00000409-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2720 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mobile Hotspot Admin (HKLM\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.2 - ZTE Corporation)
Mozilla Firefox 61.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 61.0.1 (x86 en-US)) (Version: 61.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 61.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
OLYMPUS Digital Camera Updater (HKLM\...\{2A9E8F56-C31B-4DBB-BFE2-0F4EC8192355}) (Version: 1.0.3 - OLYMPUS IMAGING CORP.)
OLYMPUS Viewer 3 (HKLM\...\{B8737126-7348-4F84-93BF-D4A82E653CA7}) (Version: 1.1.0 - OLYMPUS IMAGING CORP.)
Paint Shop Pro 7 Try And Buy (HKLM\...\{D6DE02C7-1F47-11D4-9515-00105AE4B89A}) (Version: 7.0.4.0000 - Jasc Software Inc)
Product Improvement Study for HP DeskJet 2130 series (HKLM\...\{EFF29656-8F1A-4043-B2D0-9FB4619B45AF}) (Version: 35.0.61.54677 - Hewlett-Packard Co.)
Quicken 2017 (HKLM\...\{E5AE4F66-CDA1-432A-A69E-C685D454ABDA}) (Version: 26.1.16.2 - Quicken)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5645 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver and Utility (HKLM\...\{9C049509-055C-4CFF-A116-1D12312225EB}) (Version: 1.00.0267 - REALTEK Semiconductor Corp.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)
Serif CraftArtist (HKLM\...\{C1B148C9-FACF-45F1-8356-4E1C5E3DAA5B}) (Version: 1.0.6.046 - Serif (Europe) Ltd)
Serif CraftArtist Greeting Cards Collection (HKLM\...\{7C08721F-AC43-4198-A35B-93442DD10A26}) (Version: 1.0.2.014 - Serif (Europe) Ltd)
Serif Digital Scrapbook Artist 2 (HKLM\...\{1439B98F-681E-4D51-BB90-D04474E4C6EA}) (Version: 2.0.0.011 - Serif (Europe) Ltd)
Serif PagePlus Essentials (HKLM\...\{26F8F39E-C228-4E3C-93A5-061FCCBFC914}) (Version: 1.0.0.004 - Serif (Europe) Ltd)
Serif PhotoPlus Essentials (HKLM\...\{350FBF89-ED3D-48F9-90CC-A04A96E9F7AD}) (Version: 1.0.0.002 - Serif (Europe) Ltd)
Serif Scan, Stitch and Share (HKLM\...\{7395C21A-6E14-4A48-922C-29C6B61AEF36}) (Version: 1.0.0.010 - Serif (Europe) Ltd)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype Click to Call (HKLM\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
SmartWebPrinting (HKLM\...\{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}) (Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (HKLM\...\{5DCF0E4B-F8EA-4229-A0BD-5CA6D4AFB749}) (Version: 140.0.213.000 - Hewlett-Packard) Hidden
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.7.64.0 - Safer-Networking Ltd.)
Status (HKLM\...\{2FB9EA69-51D4-4913-9AD5-762C034DE811}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
swMSM (HKLM\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 11 (HKLM\...\TeamViewer) (Version: 11.0.93231 - TeamViewer)
TrayApp (HKLM\...\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)
Windows Driver Package - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\E77704EF5E71F4F18CADFBFA68595AFE036D5D97) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
WinZip 20.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240EE}) (Version: 20.0.11659 - WinZip Computing, S.L. )
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{062D6B05-B83A-46DE-81AD-1750FB7C8DE5}\localserver32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{08613A51-6E3E-43CC-9ECF-DD58B5837341}\localserver32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{153EDC41-A2CC-4BEB-9EC8-008242389E50}\localserver32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{188028B8-D91D-4BE2-BABA-68E32BDE4420}\localserver32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{28E74F15-18C2-465E-B545-6CC738121C68}\localserver32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{2BF6042B-B9B1-46D9-A3F8-9C987FADD4C6}\localserver32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{40A222E2-93B1-45F9-9B07-0D1160A31A6C}\localserver32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{6325A84C-E746-4007-A9C5-E4C1A50ED61F}\localserver32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{92B0265C-B929-4D42-BA54-75AA39C99198}\localserver32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{9BCA87A0-5B8F-4500-A5AF-EA1279714FDF}\localserver32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{BB17DE65-B548-48C2-AC73-1FD1996C7261}\localserver32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{C77D3EEF-FDCA-4D37-B0D2-5FF650E07825}\localserver32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}\InprocServer32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{EA70EB31-CBAD-4862-AFDA-DCFCC32722ED}\localserver32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{EC9100F8-5918-4F1B-9CC1-4D34A64E0FE0}\localserver32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
CustomCLSID: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000_Classes\CLSID\{F1A1ABE3-F454-4DD9-B520-01F2EEC5F0DD}\localserver32 -> "C:\Users\Kelly\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
ContextMenuHandlers1: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2015-10-12] (Paramount Software UK Ltd)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files\Spybot - Search & Destroy 2\SDECon32.dll [2018-02-06] (Safer-Networking Ltd.)
ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshlstb.dll [2015-10-27] (WinZip Computing, S.L.)
ContextMenuHandlers2: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2015-10-12] (Paramount Software UK Ltd)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshlstb.dll [2015-10-27] (WinZip Computing, S.L.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2009-09-23] (Intel Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files\Spybot - Search & Destroy 2\SDECon32.dll [2018-02-06] (Safer-Networking Ltd.)
ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshlstb.dll [2015-10-27] (WinZip Computing, S.L.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {168A3118-57BE-47C7-AB33-CB7E904CEB98} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.)
Task: {269E14E6-2B84-4C9F-8913-CFB2F6372CC2} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2017-11-19] ()
Task: {2B0FC664-FA10-4061-84C3-C89F39D785ED} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {313E0FE0-5721-4707-8D1E-85D40101D41B} - System32\Tasks\{9D14D06C-86D4-4B77-B23C-ACB04DCCA21C} => C:\Windows\system32\pcalua.exe -a "C:\Users\Kelly\Documents\NOISYKEY\Setup Keystroke events.exe" -d C:\Users\Kelly\Documents\NOISYKEY
Task: {35E625B9-9625-4261-9783-82A20587CF30} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.)
Task: {414BC97D-1E25-4F22-AABC-4E2CDE5B708D} - System32\Tasks\Macrium-Backup-{42277FA4-C507-49FD-B8F6-CFA681E432E8} => C:\Program Files\Macrium\Reflect\Reflect.exe [2017-10-19] (Paramount Software UK Ltd)
Task: {4E876378-44B6-4341-8BD2-EA444AB42ECE} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2018-05-16] (Bitdefender)
Task: {52B39951-CAB8-4DF9-883C-BF8E774E1AD7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2018-06-27] (HP Inc.)
Task: {6644BACF-75B3-45CB-8429-40C4F293D93B} - System32\Tasks\HPCustPartic.exe_{3CDCED42-0320-482A-A452-DAD84F59E2BC} => C:\Program Files\HP\HP DeskJet 2130 series\Bin\HPCustPartic.exe [2015-04-09] (Hewlett-Packard Development Company, LP)
Task: {6C8A9B8A-19F4-4710-890B-60E6CED9460C} - System32\Tasks\HPCeeScheduleForKelly => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {70977D8B-2211-4069-B3CE-2DFE7BACD59E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-06-28] (HP Inc.)
Task: {719B4397-DD63-45D5-983A-85D56FEFD42E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-06-28] (HP Inc.)
Task: {754D2583-743B-478A-89A5-0F26CE9E644F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2018-07-23] (Adobe Systems Incorporated)
Task: {761A1DD7-42A4-4AAF-B1D9-58C892BF695A} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2863067232-3147982578-4033237767-1000
Task: {8905D5FA-FCE7-449B-BDA6-FA3BBB3F246A} - System32\Tasks\0316tbUpdateInfo => C:\ProgramData\Avg_Update_0316tb\0316tb_{90CF7EA4-173E-4A15-98EB-3B0E3A0604C2}.exe
Task: {8C7CED41-A967-45C0-AD33-70839ACC1C2F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.)
Task: {97A31412-4CAA-4632-A8E2-3383DB52AA0B} - System32\Tasks\{FED474CA-7330-4EE2-9C64-63C93D8AC268} => C:\Windows\system32\pcalua.exe -a "C:\Users\Kelly\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\81FE2OMM\JavaSetup8u65 (2).exe" -d C:\Users\Kelly\Desktop
Task: {C33A1436-5BAC-4988-ABB7-64CB1E49E640} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe [2018-04-20] (Safer-Networking Ltd.)
Task: {C351D1B4-E611-40DA-8764-D98FA1984751} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\system32\Macromed\Flash\FlashUtil32_30_0_0_134_Plugin.exe [2018-07-23] (Adobe Systems Incorporated)
Task: {CB9BC30D-6F27-43CF-B6C1-932AFFA8B3FB} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-03-21] (Adobe Systems Incorporated)
Task: {CCB4ED9F-CAB2-42D4-A39D-7636B010B759} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-03-14] (Google Inc.)
Task: {D5BDB169-365A-4D3B-8E9C-A41ECBA5654D} - System32\Tasks\0116tbUpdateInfo => C:\ProgramData\Avg_Update_0116tb\0116tb_{58E7D414-2F40-498E-A0B7-F291F1C5595A}.exe
Task: {DB538C3A-CC38-4413-8692-2FFB20DF7377} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe [2018-04-20] (Safer-Networking Ltd.)
Task: {E3E84C62-9B23-45DC-96D4-A79C252CE971} - System32\Tasks\HPCustParticipation HP DeskJet 2130 series => C:\Program Files\HP\HP DeskJet 2130 series\Bin\HPCustPartic.exe [2015-04-09] (Hewlett-Packard Development Company, LP)
Task: {EC39BA1D-56C7-43FA-B618-E66137F7A876} - System32\Tasks\{BB0EE357-10FA-4B1C-A910-4CFAF18582C9} => C:\Windows\system32\pcalua.exe -a D:\Setup.exe -d D:\
Task: {F27F4DDA-5130-43F4-ACED-5A2C7FD042AE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {F509EB99-B1B1-433E-AC05-EA23AB9BC4E1} - System32\Tasks\Macrium-Backup-{D95DA6AF-1CF8-4C4B-83E4-2494F63863AB} => C:\Program Files\Macrium\Reflect\Reflect.exe [2017-10-19] (Paramount Software UK Ltd)
Task: {F6DEECEB-32AB-4982-9E67-18FD2DE6B084} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-03-14] (Google Inc.)
Task: {F8F6D813-73C0-4678-8C3E-9A65B3DAF901} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe [2018-04-20] (Safer-Networking Ltd.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\0116tbUpdateInfo.job => C:\ProgramData\Avg_Update_0116tb\0116tb_{58E7D414-2F40-498E-A0B7-F291F1C5595A}.exe
Task: C:\Windows\Tasks\0316tbUpdateInfo.job => C:\ProgramData\Avg_Update_0316tb\0316tb_{90CF7EA4-173E-4A15-98EB-3B0E3A0604C2}.exe
Task: C:\Windows\Tasks\HPCeeScheduleForKelly.job => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\Macrium-Backup-{42277FA4-C507-49FD-B8F6-CFA681E432E8}.job => C:\Program Files\Macrium\Reflect\Reflect.exej-e -w C:\Users\Kelly\Documents\Reflect\My Backup(1).xml
Task: C:\Windows\Tasks\Macrium-Backup-{D95DA6AF-1CF8-4C4B-83E4-2494F63863AB}.job => C:\Program Files\Macrium\Reflect\Reflect.exej-e -w C:\Users\Kelly\Documents\Reflect\My Backup(1).xml
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2018-07-23 20:46 - 2018-02-05 16:57 - 000436016 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2015-03-18 13:56 - 2014-03-26 03:00 - 000465664 _____ () C:\Program Files\Hostless Modem\Mobile Hotspot Admin\CheckNDISPort_df.exe
2015-03-18 13:56 - 2014-03-26 03:00 - 000446720 _____ () C:\Program Files\Hostless Modem\Mobile Hotspot Admin\CancelAutoPlay_df.exe
2018-01-15 16:47 - 2014-11-18 15:44 - 000255072 _____ () C:\Program Files\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\TrayTipAgentE.exe
2018-01-15 16:47 - 2014-02-13 16:27 - 000222792 _____ () C:\Program Files\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\traynet.dll
2018-01-15 16:47 - 2014-02-13 16:27 - 000275528 _____ () C:\Program Files\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\libcurl.dll
2018-01-15 16:47 - 2014-02-13 16:27 - 000113166 _____ () C:\Program Files\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\zlib1.dll
2018-01-15 16:47 - 2014-02-13 16:27 - 000249928 _____ () C:\Program Files\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\uexper.dll
2018-04-20 10:20 - 2014-12-12 17:24 - 000044760 _____ () C:\Windows\runSW.exe
2018-04-20 10:20 - 2013-02-27 17:17 - 000221184 _____ () C:\Program Files\Realtek\USB Wireless LAN Utility\EnumDevLib.dll
2013-10-21 15:56 - 2006-09-04 20:26 - 000014336 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\Tracer.dll
2013-10-21 15:56 - 2011-04-25 16:12 - 000118784 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyPalm.dll
2013-10-21 15:56 - 2011-08-09 15:22 - 000450560 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OSLite.dll
2017-09-22 20:19 - 2018-06-06 16:14 - 000220096 _____ () C:\Program Files\Bitdefender Antivirus Free\txmlutil.dll
2018-05-08 05:59 - 2018-05-08 05:59 - 000846672 _____ () C:\Program Files\Bitdefender Antivirus Free\Signatures\OTEngines\OTEngines_02438_001\ashttpbr.mdl
2018-05-08 05:59 - 2018-05-08 05:59 - 000467968 _____ () C:\Program Files\Bitdefender Antivirus Free\Signatures\OTEngines\OTEngines_02438_001\ashttpdsp.mdl
2018-05-08 05:59 - 2018-05-08 05:59 - 002649808 _____ () C:\Program Files\Bitdefender Antivirus Free\Signatures\OTEngines\OTEngines_02438_001\ashttpph.mdl
2018-05-08 05:59 - 2018-05-08 05:59 - 001290344 _____ () C:\Program Files\Bitdefender Antivirus Free\Signatures\OTEngines\OTEngines_02438_001\ashttprbl.mdl
2018-06-17 10:55 - 2018-07-10 18:01 - 002169040 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2018-06-26 13:55 - 2018-06-22 12:04 - 002242904 _____ () C:\Program Files\Google\Chrome\Application\67.0.3396.99\swiftshader\libglesv2.dll
2018-06-26 13:55 - 2018-06-22 12:04 - 000109912 _____ () C:\Program Files\Google\Chrome\Application\67.0.3396.99\swiftshader\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
There are 7940 more sites.
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\...\123simsen.com -> www.123simsen.com
There are 7940 more sites.
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 19:04 - 2018-07-24 08:38 - 000454639 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123haustiereundmehr.com
127.0.0.1 123moviedownload.com
127.0.0.1 www.123moviedownload.com
There are 15605 more lines.
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Kelly\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.43.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{22659305-C4E5-4A49-9916-B651A65B36E5}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{FC6FC25D-100A-4646-9DD6-5B6AE03C8BDA}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{4E0722CC-B7F4-47E1-A0AE-FBA21A5B5CB3}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{FF3BCC58-5738-406F-84DB-D8759D6F3D00}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{A5EB7281-EB00-4D62-B698-F649B0B2F9CA}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{A8F5416D-DEB3-40F6-B23A-228206C2B709}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{B46728D0-1944-4C9E-964B-0039AA484502}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{243F8B93-861A-4CFC-AF20-1CE54E3AABDD}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{92CE31E2-C870-45D7-B440-AAA74699FB72}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{C732706B-74B0-4411-B6E1-02C42F30ACBE}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{F638767A-C54E-41D8-9D2D-90B69B3EA31F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{886ACE18-3E84-4616-BCA3-58F263976D14}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{AE254109-DBF0-4BE5-AEE5-FC728B6FDEB6}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe
FirewallRules: [{C06D584F-32D3-4586-87E7-C1128DCA0F9F}] => (Allow) C:\Program Files\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{777CE107-D3E4-43CC-A92F-E32B44FDE2C8}] => (Allow) C:\Users\Kelly\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0OXDQXPU\incredimail_install.exe
FirewallRules: [{3E1867F9-4776-46CE-A077-C76F680430B8}] => (Allow) C:\Users\Kelly\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0OXDQXPU\incredimail_install.exe
FirewallRules: [{4CD2794D-B4C3-4094-BD7A-9B0877A40718}] => (Allow) C:\Program Files\IncrediMail\Bin\IncMail.exe
FirewallRules: [{A6F14044-70ED-4E40-B579-378F07A3EBB1}] => (Allow) C:\Program Files\IncrediMail\Bin\IncMail.exe
FirewallRules: [{951AFA79-AE85-4878-A3D6-20EAE6A148AB}] => (Allow) C:\Program Files\IncrediMail\Bin\ImApp.exe
FirewallRules: [{3C89F4A6-F5CD-4378-ADAA-E5CB6396D2F6}] => (Allow) C:\Program Files\IncrediMail\Bin\ImApp.exe
FirewallRules: [{4C7252F2-6B36-4CCB-BF93-0B99A017D996}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{9AE336E2-4331-4F7D-B25B-1B9E23FE1C7C}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{7C74D263-024A-4B4D-B5A3-3AA84C3321C1}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{8123B6AA-374E-4290-86E6-E8A8B966F060}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{DB232870-003A-4DAA-9BC5-2AFAECB933C5}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{8344B42B-0FDE-45B1-9101-F047D287247B}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [{82023296-E2B6-4B45-BB03-DADCB278812A}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [{A902D840-DB0B-4872-95BB-F580201E4637}] => (Allow) C:\Users\Kelly\AppData\Local\Temp\7zS604B\HPDiagnosticCoreUI.exe
FirewallRules: [{D45CB6C1-CCC1-4605-A07B-28DF7DEAFF6D}] => (Allow) C:\Users\Kelly\AppData\Local\Temp\7zS604B\HPDiagnosticCoreUI.exe
FirewallRules: [{65B15C61-76F8-4146-B377-5FC5E1E6599F}] => (Allow) C:\Program Files\HP\HP DeskJet 2130 series\Bin\USBSetup.exe
FirewallRules: [{1329971C-8115-4179-88AA-663C3A3C1B5F}] => (Allow) C:\Program Files\HP\HP DeskJet 2130 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{13225339-D1A9-49E8-BB11-9782FA9490C8}] => (Allow) C:\Users\Kelly\AppData\Local\Temp\7zS70C3\HPDiagnosticCoreUI.exe
FirewallRules: [{A261A42E-4B23-4C3D-8BED-B3353AED3DC2}] => (Allow) C:\Users\Kelly\AppData\Local\Temp\7zS70C3\HPDiagnosticCoreUI.exe
FirewallRules: [{62EAA209-47A4-4637-9B4F-7C7133BFB19C}] => (Allow) C:\Users\Kelly\AppData\Local\Temp\7zS7163\HPDiagnosticCoreUI.exe
FirewallRules: [{CF295BB0-6C54-41CB-8518-D800339D21F1}] => (Allow) C:\Users\Kelly\AppData\Local\Temp\7zS7163\HPDiagnosticCoreUI.exe
FirewallRules: [{E0F12348-1C51-4A33-9532-07E4CEB7047B}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{C3E5F457-4C34-4827-A132-338F9E86E6AC}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{89273056-1FB2-462A-94D3-F01426CD3D0F}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{C4E48EC2-9A8F-4633-BE4F-1D12C45BF3BB}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{AD9068D5-E587-4825-A3A1-A5306BEBF8C9}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{4D575B87-341E-48E4-8D2D-8E01F08A41EA}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{AD40DC6F-D953-463B-8669-E2A1C42A455C}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{CF738B92-AD08-4DB8-85D2-CE7EC8DD00A1}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{AAA584A9-6EB6-4D07-84BA-B5269FBCAB67}] => (Allow) C:\PROGRA~1\REALTEK\USBWIR~1\RtWlan.exe
FirewallRules: [{19EE029B-8525-4D92-A056-9CFE8AC5AEAE}] => (Allow) LPort=1542
FirewallRules: [{3F08B4D5-0D70-4091-9E43-B2430D7385C5}] => (Allow) LPort=1542
FirewallRules: [{33905E74-6D44-4245-83CE-3C749A3B99EB}] => (Allow) LPort=53
FirewallRules: [{5D820765-274F-40F7-9A45-23E3B902774D}] => (Allow) C:\PROGRA~1\REALTEK\USBWIR~1\Rtldhcp.exe
FirewallRules: [{62576861-CE0E-41A0-809D-BE06F92D9ED1}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{5BB5594B-CB6C-4D92-9A5E-60AA4570C440}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{C12FF814-B8F0-40C6-BA13-0524588ABFC7}] => (Allow) LPort=53
FirewallRules: [{554E8176-8F80-48A0-9509-D32E6AAB7E0A}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{EEA17A97-54AB-43CB-A981-03564044C4AD}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{01AE66D5-72F8-445A-93BC-6C5604497FC1}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{B10BE374-7E6C-4D57-9CB4-C1BAD0883BAF}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe
FirewallRules: [{7FFF6E63-130D-4FF7-BDB6-F9B107A9DF9A}] => (Allow) C:\Users\Kelly\AppData\Local\Temp\7zS2B45\HPDiagnosticCoreUI.exe
FirewallRules: [{97823C73-2ADA-469A-AA2F-08A20B4A3240}] => (Allow) C:\Users\Kelly\AppData\Local\Temp\7zS2B45\HPDiagnosticCoreUI.exe
FirewallRules: [{871BED10-EE2E-4A0F-ABA9-64EA36783E16}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{8930E1DF-830D-486D-A8EC-395EEF3E79E8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{E74BA614-FDAE-4BC6-8599-772D7B885F05}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Restore Points =========================
18-07-2018 00:00:01 Scheduled Checkpoint
==================== Faulty Device Manager Devices =============
Name: PS/2 Compatible Mouse
Description: PS/2 Compatible Mouse
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Standard PS/2 Keyboard
Description: Standard PS/2 Keyboard
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard keyboards)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (07/25/2018 05:09:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (07/25/2018 03:44:07 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: Microsoft Office 2000 Premium -- Error 1706. No valid source could be found for product Microsoft Office 2000 Premium. The Windows installer cannot continue.
Error: (07/25/2018 03:44:05 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: Microsoft Office 2000 Premium -- Error 1706. No valid source could be found for product Microsoft Office 2000 Premium. The Windows installer cannot continue.
Error: (07/24/2018 04:48:43 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: Microsoft Office 2000 Premium -- Error 1706. No valid source could be found for product Microsoft Office 2000 Premium. The Windows installer cannot continue.
Error: (07/24/2018 04:48:41 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: Microsoft Office 2000 Premium -- Error 1706. No valid source could be found for product Microsoft Office 2000 Premium. The Windows installer cannot continue.
Error: (07/23/2018 04:14:36 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: Microsoft Office 2000 Premium -- Error 1706. No valid source could be found for product Microsoft Office 2000 Premium. The Windows installer cannot continue.
Error: (07/23/2018 04:14:34 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: Microsoft Office 2000 Premium -- Error 1706. No valid source could be found for product Microsoft Office 2000 Premium. The Windows installer cannot continue.
Error: (07/22/2018 03:18:10 AM) (Source: MsiInstaller) (EventID: 11706) (User: NT AUTHORITY)
Description: Product: Microsoft Office 2000 Premium -- Error 1706. No valid source could be found for product Microsoft Office 2000 Premium. The Windows installer cannot continue.
System errors:
=============
Error: (07/25/2018 05:10:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Realtek DHCP Service service terminated unexpectedly. It has done this 1 time(s).
Error: (07/25/2018 05:10:12 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
atc
Error: (07/25/2018 12:36:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Bitdefender Security Service service terminated unexpectedly. It has done this 5 time(s).
Error: (07/25/2018 12:33:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Bitdefender Security Service service terminated unexpectedly. It has done this 4 time(s).
Error: (07/25/2018 12:29:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Bitdefender Security Service service terminated unexpectedly. It has done this 3 time(s).
Error: (07/25/2018 12:27:16 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Bitdefender Security Service service terminated unexpectedly. It has done this 2 time(s).
Error: (07/25/2018 11:55:43 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Bitdefender Security Service service terminated unexpectedly. It has done this 1 time(s).
Error: (07/25/2018 11:28:47 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: The server {1F87137D-0E7C-44D5-8C73-4EFFB68962F2} did not register with DCOM within the required timeout.
==================== Memory info ===========================
Processor: Intel® Core™2 CPU 6300 @ 1.86GHz
Percentage of memory in use: 78%
Total physical RAM: 3063.31 MB
Available physical RAM: 657.91 MB
Total Virtual: 6124.97 MB
Available Virtual: 2687.89 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:111.64 GB) (Free:62.16 GB) NTFS
Drive e: (System) (Fixed) (Total:0.15 GB) (Free:0.03 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive f: (Backup) (Fixed) (Total:366.17 GB) (Free:316.43 GB) NTFS
Drive g: (System) (Fixed) (Total:0.15 GB) (Free:0.12 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive h: (Windows) (Fixed) (Total:332.31 GB) (Free:286.37 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 698.6 GB) (Disk ID: A5856FA5)
Partition 1: (Active) - (Size=150 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=332.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=366.2 GB) - (Type=05)
========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: 0021B2C5)
Partition 1: (Active) - (Size=150 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.6 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
