Spyware / Malware / Virus Removal

Infected Computer

41 min read

Looking for the outcome? Ask AI

dfkelly Topic Starter

Post #1March 24, 2015, 7:50 PM UTC

I think my computer is infected with Pixel.Mathtag, but not positive it is the culprit.

I have attached the requested files and look foraward to your response.

Attachments:

OCD

Post #2March 25, 2015, 4:57 PM UTC

Hi dfkelly,

My name is OCD. I would be more than happy to take a look at your log and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:

I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
The fixes are specific to your problem and should only be used for the issues on this machine.
Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
It's often worth reading through these instructions and printing them for ease of reference.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
Please reply to this thread. Do not start a new topic.
Copy and Paste logs directly into the reply window. DO NOT attach the logs unless specifically instructed to do so.

IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.

DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your Operating System and losing all your programs and data.

Please stay with this topic until I let you know that your system appears to be "All Clear"

Important: All tools MUST be run from the Desktop.

=========================

Did you set a Proxy for Internet Explorer?
ProxyEnable: [S-1-5-21-2406339565-906508361-884548699-1165] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-2406339565-906508361-884548699-1165] => localhost:21320

=========================

[external image: bullseye_zpse9eaf36e.gif] FRST Fix Script

Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it on the desktop as fixlist.txt

Start
CloseProcesses:
HKLM-x32\…\Run: [] => [X]
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {A10C8BC8-D812-4F99-92EF-08CD71F92774} URL = 
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-2406339565-906508361-884548699-1165 -> {A10C8BC8-D812-4F99-92EF-08CD71F92774} URL = 
Toolbar: HKLM - No Name - {6EDB42F3-315E-4FD0-84D6-6EF5278C09EC} -  No File
Toolbar: HKU\S-1-5-21-2406339565-906508361-884548699-1165 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Task: {B4B64790-B152-448A-9B12-A35E7E7198D6} - System32\Tasks\Microsoft\Windows\Maintenance\UP_Scheduler => %LOCALAPPDATA%\GCC\Controller.exe <==== ATTENTION
Task: {D422B3B7-2EBA-4DA7-98A7-A1501CBF05FD} - System32\Tasks\GC_Scheduler => %LOCALAPPDATA%\GCC\Controller.exe <==== ATTENTION
EmptyTemp:
End

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST and press the Fix button just once and wait.
The tool will make a log (Fixlog.txt) please post it to your reply.

=========================

[external image: bullseye_zpse9eaf36e.gif] Security Check

Download Security Check by screen317 from here or here.

Save it to your Desktop.
- Windows XP : Double click on the icon to run it.
- Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

=========================

In your next post please provide the following:

Fixlist.txt
checkup.txt
Answer any questions I may have asked.

dfkelly

Post #3March 25, 2015, 9:48 PM UTC

OCD, much appreciate your help.

My answers and posts are, as follows.

1) No, I did not set my proxy for Internet Explorer.

2) Fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by [removed] at 2015-03-25 16:51:16 Run:1
Running from C:\Users\[removed]\Desktop
[removed] Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKLM-x32\…\Run: [] => [X]
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {A10C8BC8-D812-4F99-92EF-08CD71F92774} URL =
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-2406339565-906508361-884548699-1165 -> {A10C8BC8-D812-4F99-92EF-08CD71F92774} URL =
Toolbar: HKLM - No Name - {6EDB42F3-315E-4FD0-84D6-6EF5278C09EC} - No File
Toolbar: HKU\S-1-5-21-2406339565-906508361-884548699-1165 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Task: {B4B64790-B152-448A-9B12-A35E7E7198D6} - System32\Tasks\Microsoft\Windows\Maintenance\UP_Scheduler => %LOCALAPPDATA%\GCC\Controller.exe <==== ATTENTION
Task: {D422B3B7-2EBA-4DA7-98A7-A1501CBF05FD} - System32\Tasks\GC_Scheduler => %LOCALAPPDATA%\GCC\Controller.exe <==== ATTENTION
EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A10C8BC8-D812-4F99-92EF-08CD71F92774}" => Key deleted successfully.
HKCR\CLSID\{A10C8BC8-D812-4F99-92EF-08CD71F92774} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKU\S-1-5-21-2406339565-906508361-884548699-1165\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A10C8BC8-D812-4F99-92EF-08CD71F92774}" => Key deleted successfully.
HKCR\CLSID\{A10C8BC8-D812-4F99-92EF-08CD71F92774} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{6EDB42F3-315E-4FD0-84D6-6EF5278C09EC} => value deleted successfully.
HKCR\CLSID\{6EDB42F3-315E-4FD0-84D6-6EF5278C09EC} => Key not found.
HKU\S-1-5-21-2406339565-906508361-884548699-1165\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Value not found.
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B4B64790-B152-448A-9B12-A35E7E7198D6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B4B64790-B152-448A-9B12-A35E7E7198D6}" => Key deleted successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\UP_Scheduler => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Maintenance\UP_Scheduler" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D422B3B7-2EBA-4DA7-98A7-A1501CBF05FD}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D422B3B7-2EBA-4DA7-98A7-A1501CBF05FD}" => Key deleted successfully.
C:\Windows\System32\Tasks\GC_Scheduler => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GC_Scheduler" => Key deleted successfully.
EmptyTemp: => Removed 3.5 GB temporary data.

The system needed a reboot.

==== End of Fixlog 16:51:36 ====

3) checkup.txt

Results of screen317's Security Check version 0.99.99
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Disabled!
AVG Internet Security Business Edition
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
MVPS Hosts File
Spybot - Search & Destroy
Java 7 Update 45
crystalreports.designers.java.documentation.viewer-4.0-en-32
crystalreports.designers.java.launcher-4.0-core-32
Visual Studio Extensions for Windows Library for JavaScript
crystalreports.designers.java.javaviewer-4.0-core-32
crystalreports.designers.java.javaviewer-4.0-en-32
Java version 32-bit out of Date!
Adobe Flash Player 16.0.0.305 Flash Player out of Date!
Mozilla Firefox (36.0.4)
Google Chrome (41.0.2272.101)
Google Chrome (41.0.2272.89)
````````Process Check: objlist.exe by Laurent````````
Spybot Teatimer.exe is disabled!
AVG avgwdsvc.exe
Malwarebytes Anti-Exploit mbae-svc.exe
Malwarebytes Anti-Exploit mbae64.exe
Malwarebytes Anti-Exploit mbae.exe
Kaspersky Lab Kaspersky Security Scan 2.0 kss.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````

That's it.

OCD

Post #4March 26, 2015, 4:52 AM UTC

Hi dfkelly,

[external image: bullseye_zpse9eaf36e.gif] FRST Fix Script

Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it on the desktop as fixlist.txt

Start
ProxyEnable: [S-1-5-21-2406339565-906508361-884548699-1165] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-2406339565-906508361-884548699-1165] => localhost:21320
End

- Windows XP : Double click on the icon to run it.
- Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
Click on the Scan button.
AdwCleaner will begin to scan your computer like it did before.
After the scan has finished…
Click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a log file report (AdwCleaner[S0].txt) will open automatically.
Copy and paste the contents of that log file in your next reply.
A copy of that log file will also be saved in the C:\AdwCleaner folder.

=========================

[external image: bullseye_zpse9eaf36e.gif] Junkware Removal Tool

Download Junkware Removal Tool to your desktop.

- Windows XP : Double click on the icon to run it.
- Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
Shut down your protection software now to avoid potential conflicts.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

=========================

[external image: bullseye_zpse9eaf36e.gif] Re-run Farbar Recovery Scan Tool it should be on your desktop.

- Windows XP : Double click on the icon to run it.
- Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.

=========================

In your next post please provide the following:

Fixlog.txt
AdwCleaner[S0].txt
JRT.txt
fresh FRST.txt
How is the computer running?

dfkelly

Post #5March 26, 2015, 2:28 PM UTC

Fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by [removed] at 2015-03-26 08:34:21 Run:2
Running from C:\Users\[removed]\Desktop
[removed] Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
ProxyEnable: [S-1-5-21-2406339565-906508361-884548699-1165] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-2406339565-906508361-884548699-1165] => localhost:21320
End
*****************

HKU\S-1-5-21-2406339565-906508361-884548699-1165\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.
HKU\S-1-5-21-2406339565-906508361-884548699-1165\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value not found.

==== End of Fixlog 08:34:21 ====

AdwCleaner[SO].txt

When I ran AdwCleaner it did not generate a new txt file. I searched my computer and looked in all the places it could be, but the latest AdwCleaner.txt file I could find was run two days ago which is what is posted below. Let me know if I need to rerun.

# AdwCleaner v4.113 - Logfile created 24/03/2015 at 20:44:48
# Updated 22/03/2015 by Xplode
# Database : 2015-03-23.1 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Dave - DAVE-LAPTOP
# Running from : C:\Users\Dave.DOMAIN\Desktop\SpyBot-MalwareBytesEtc\AdwCleaner.exe
# Option : Cleaning

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Scheduled tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{065C1A21-97F8-45FB-A9F0-861B60FACEC8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3204358F-5904-46A6-841F-D6B5BE3EF4E3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3AE67737-0E3E-44AA-AA5E-46A68BF017FF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3EE5B726-044A-48D2-AA7B-049BD9A0F62A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{60FBBE03-57FF-49D8-B38E-053D3F489825}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6A5182F1-C0B8-42B8-96CC-7F329CD46913}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6C153418-8E4D-4FAF-AF27-5201E38463A7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A26A2F05-AC4D-4A1E-9531-9125F7309B78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5D6240-7DF0-435D-9B9B-F8586A99DE86}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F343045E-E20A-46E1-82D8-9962C43EFC9E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FBB360DC-CB6C-4D6A-808A-2C773151BFFF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FFD7DDAC-EC28-42A5-8D39-917B9078604B}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Key Deleted : HKLM\SOFTWARE\Taronja
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - localhost:21320
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17689

-\\ Mozilla Firefox v36.0.4 (x86 en-US)

-\\ Google Chrome v41.0.2272.101

-\\ Chromium v

*************************

AdwCleaner[R0].txt - [2380 bytes] - [16/11/2013 22:59:58]
AdwCleaner[R12].txt - [2879 bytes] - [23/02/2014 19:24:23]
AdwCleaner[R13].txt - [3097 bytes] - [24/03/2015 20:42:25]
AdwCleaner[R1].txt - [1095 bytes] - [17/11/2013 23:48:16]
AdwCleaner[R2].txt - [1073 bytes] - [18/11/2013 23:32:58]
AdwCleaner[R4].txt - [1318 bytes] - [17/12/2013 12:38:59]
AdwCleaner[R7].txt - [1456 bytes] - [04/01/2014 12:46:28]
AdwCleaner[R9].txt - [1576 bytes] - [08/01/2014 12:58:58]
AdwCleaner[S0].txt - [2364 bytes] - [16/11/2013 23:06:03]
AdwCleaner[S12].txt - [2971 bytes] - [23/02/2014 19:25:00]
AdwCleaner[S13].txt - [2762 bytes] - [24/03/2015 20:44:48]
AdwCleaner[S1].txt - [1159 bytes] - [17/11/2013 23:49:03]
AdwCleaner[S2].txt - [1137 bytes] - [18/11/2013 23:33:35]
AdwCleaner[S4].txt - [1382 bytes] - [17/12/2013 12:39:50]
AdwCleaner[S7].txt - [1519 bytes] - [04/01/2014 12:47:13]
AdwCleaner[S9].txt - [1639 bytes] - [08/01/2014 12:59:38]

########## EOF - C:\AdwCleaner\AdwCleaner[S13].txt - [3117 bytes] ##########

JRT.txt

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.6 (03.22.2015:1)
OS: Windows 7 Professional x64
Ran by [removed] on Thu 03/26/2015 at 9:18:35.00
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\update albrechto
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\util albrechto

~~~ Files

~~~ Folders

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Thu 03/26/2015 at 9:22:16.66
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST.txt

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by [removed] (administrator) on DAVE-LAPTOP on 26-03-2015 10:13:51
Running from C:\Users\[removed]\Desktop
[removed] Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
(Authentec Inc.) C:\Program Files\Common Files\SPBA\upeksvr.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\BCMWLTRY.EXE
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation) C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
() C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe
(Microsoft Corporation) C:\Program Files (x86)\EMET 5.1\EMET_Service.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.ACT7\MSSQL\Binn\sqlservr.exe
(Dell, Inc.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\hapi64\pbadrvsvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Dell Inc.) C:\Program Files\Dell\Feature Enhancement Pack\DFEPService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files (x86)\EMET 5.1\EMET_Agent.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Box, Inc.) C:\Program Files\Box\Box Sync\BoxSync.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
(Barracuda Networks, Inc.) C:\Users\Dave.DOMAIN\AppData\Roaming\Copy\CopyAgent.exe
(Microsoft Corporation) C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(Dropbox, Inc.) C:\Users\Dave.DOMAIN\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe
(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\Box\Box Sync\BoxSyncMonitor.exe
(O2Micro International) C:\Windows\System32\o2flash.exe
() C:\Windows\SysWOW64\srvany.exe
(O2Micro.) C:\Windows\SysWOW64\SDIOAssist.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcfgex.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\outlook.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [8925184 2014-01-14] (Dell Inc.)
HKLM\…\Run: [TdmNotify] => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe [371024 2013-03-05] (Wave Systems Corp.)
HKLM\…\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [708952 2013-07-08] (Alps Electric Co., Ltd.)
HKLM\…\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-08-16] (IDT, Inc.)
HKLM\…\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\…\Run: [BoxSync] => C:\Program Files\Box\Box Sync\BoxSync.exe [5728624 2015-03-11] (Box, Inc.)
HKLM\…\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-02-13] (Apple Inc.)
HKLM-x32\…\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-11-13] (Intel Corporation)
HKLM-x32\…\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2013-02-22] (Intel Corporation)
HKLM-x32\…\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284480 2012-05-30] (Intel Corporation)
HKLM-x32\…\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411952 2014-11-04] (AVG Technologies CZ, s.r.o.)
HKLM-x32\…\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-02-13] (Apple Inc.)
HKLM-x32\…\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\…\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\…\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3498728 2014-12-03] (Adobe Systems Inc.)
HKLM-x32\…\Run: [RemoteControl9] => C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2010-10-01] (CyberLink Corp.)
HKLM-x32\…\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2368736 2014-06-03] (Microsoft Corp.)
HKLM-x32\…\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\…\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\…\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
HKLM-x32\…\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\…\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2561848 2014-12-10] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
Winlogon\Notify\spba: C:\Program Files\Common Files\SPBA\homefus2.dll (Authentec Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [26232152 2015-02-19] (Google)
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.)
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-10-17] (Apple Inc.)
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\Run: [AppleIEDAV] => C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [1080104 2014-08-04] (Apple Inc.)
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\Run: => C:\Users\Dave.DOMAIN\AppData\Roaming\Copy\CopyAgent.exe [15435920 2015-01-27] (Barracuda Networks, Inc.)
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\Run: [OneDrive] => C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\OneDrive\OneDrive.exe [281248 2015-03-10] (Microsoft Corporation)
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [43816 2014-10-20] (Apple Inc.)
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\RunOnce: [Uninstall C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811_1\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811_1\amd64"
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\RunOnce: [Uninstall C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811_1] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811_1"
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\RunOnce: [Uninstall C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64"
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\RunOnce: [Uninstall C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64"
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\RunOnce: [Uninstall C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64"
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\RunOnce: [Uninstall C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64"
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\RunOnce: [Uninstall C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618\amd64"
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\RunOnce: [Uninstall C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64"
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\RunOnce: [Uninstall C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\OneDrive\17.3.4713.0209\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\OneDrive\17.3.4713.0209\amd64"
HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\RunOnce: [Uninstall C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64"
HKU\S-1-5-18\…\Run: => C:\Users\Dave.DOMAIN\AppData\Roaming\Copy\CopyAgent.exe [15435920 2015-01-27] (Barracuda Networks, Inc.)
Lsa: [Authentication Packages] msv1_0 wvauth
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Dave.DOMAIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Dave.DOMAIN\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Dave.DOMAIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Dave.DOMAIN\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Smart Settings.lnk
ShortcutTarget: Smart Settings.lnk -> C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe (Dell Inc.)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Smart Settings.lnk
ShortcutTarget: Smart Settings.lnk -> C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe (Dell Inc.)
ShellIconOverlayIdentifiers: [    BoxSyncFileLocked] -> {2a607da5-abe8-358e-a881-c0f5faf2d3a5} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [    BoxSyncFileLockedByOther] -> {f7d2951f-0b6b-346c-99ec-69cffc30a364} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [    BoxSyncNotSynced] -> {5ea95e3d-3e46-3812-b03c-49785fa67d41} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [    BoxSyncProblem] -> {a88b7184-bfa1-3d14-8efb-2225df9699bc} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [    BoxSyncSynced] -> {c89f9943-8f58-3eca-bd55-a658f53b2f48} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [1aCopyShExtError] -> {83BEA36E-7680-4598-A4DF-994426F6E78D} => C:\Users\Dave.DOMAIN\AppData\Roaming\Copy\overlay\CopyShExt.dll (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [2aCopyShExtSynced] -> {845B7388-6F85-4F32-9FD5-F02DC7882B89} => C:\Users\Dave.DOMAIN\AppData\Roaming\Copy\overlay\CopyShExt.dll (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [3aCopyShExtSyncing] -> {F6378A7A-F753-449B-AE1B-997A96132E61} => C:\Users\Dave.DOMAIN\AppData\Roaming\Copy\overlay\CopyShExt.dll (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [4aCopyShExtSyncingProg1] -> {3A511828-777D-46F8-82F4-5B530C1B3D9E} => C:\Users\Dave.DOMAIN\AppData\Roaming\Copy\overlay\CopyShExt.dll (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [5aCopyShExtSyncingProg2] -> {C8C88204-5B14-40EC-BA72-8AEBC762047E} => C:\Users\Dave.DOMAIN\AppData\Roaming\Copy\overlay\CopyShExt.dll (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [6aCopyShExtSyncingProg3] -> {ACFF45C3-3EEB-4351-86C2-6696BA264239} => C:\Users\Dave.DOMAIN\AppData\Roaming\Copy\overlay\CopyShExt.dll (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [7aCopyShExtSyncingProg4] -> {29AF997F-488B-46F0-AE78-7146F1B89CC3} => C:\Users\Dave.DOMAIN\AppData\Roaming\Copy\overlay\CopyShExt.dll (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [8aCopyShExtSyncingProg5] -> {03F9AD29-1C78-4B66-8890-B177B5430C53} => C:\Users\Dave.DOMAIN\AppData\Roaming\Copy\overlay\CopyShExt.dll (Barracuda Networks, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Dave.DOMAIN\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Dave.DOMAIN\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Dave.DOMAIN\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Dave.DOMAIN\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [EnabledUnlockedFDEIconOverlay] -> {30D3C2AF-9709-4D05-9CF4-13335F3C1E4A} => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll (Wave Systems Corp.)
ShellIconOverlayIdentifiers: [UninitializedFdeIconOverlay] -> {CF08DA3E-C97D-4891-A66B-E39B28DD270F} => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll (Wave Systems Corp.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Dave.DOMAIN\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Dave.DOMAIN\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Dave.DOMAIN\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Dave.DOMAIN\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2406339565-906508361-884548699-1165 -> {47FD7C97-10E8-4537-8453-7400D4A144EE} URL = http://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10743
SearchScopes: HKU\S-1-5-21-2406339565-906508361-884548699-1165 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = https://www.google.com/search?q={searchTerms}&rlz=1I7NDKB_enUS559
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-02-10] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-22] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2013-12-21] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-02-10] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-22] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2013-12-21] (Adobe Systems Incorporated)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2013-12-21] (Adobe Systems Incorporated)
DPF: HKLM-x32 {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} https://support.dell.com/systemprofiler/SysProExe.CAB
DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://akamaicdn.webex.com/client/WBXclient-T29L10NSP10EP1-10115/webex/ieatgpc1.cab
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.10.2
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Dave.DOMAIN\AppData\Roaming\Mozilla\Firefox\Profiles\ibcxvlxh.default
FF DefaultSearchEngine.US: Google
FF Homepage: www.google.com
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-05] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/VirtualEarth3D,version=4.0 -> C:\Program Files (x86)\Virtual Earth 3D\ [2014-05-13] ()
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-29] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-05] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-10-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-10-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-10-21] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/VirtualEarth3D,version=4.0 -> C:\Program Files (x86)\Virtual Earth 3D\ [2013-10-21] ()
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-29] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2406339565-906508361-884548699-1165: @citrixonline.com/appdetectorplugin -> C:\Users\Dave.DOMAIN\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-11-03] (Citrix Online)
FF Extension: iCloud Bookmarks - C:\Users\Dave.DOMAIN\AppData\Roaming\Mozilla\Firefox\Profiles\ibcxvlxh.default\Extensions\[removed] [2014-11-17]
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-10-22]
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-11-04]
FF HKU\S-1-5-21-2406339565-906508361-884548699-1165\…\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

Chrome:
=======
CHR Profile: C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (BIODIGITAL HUMAN) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\agoenciogemlojlhccbcpcfflicgnaak [2014-09-26]
CHR Extension: (Google Docs) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-03]
CHR Extension: (Google Drive) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-16]
CHR Extension: (Keeper® Password Manager & Digital Vault) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfogiafebfohielmmehodmfbbebbbpei [2014-01-03]
CHR Extension: (YouTube) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-03]
CHR Extension: (Google Search) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-03]
CHR Extension: (Adobe Acrobat - Create PDF) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2014-01-03]
CHR Extension: (iCloud Bookmarks) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2015-03-10]
CHR Extension: (Collusion for Chrome) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\ganlifbpkcplnldliibcbegplfmcfigp [2014-01-03]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2014-04-02]
CHR Extension: (Vector Paint) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnbpdiengicdefcjecjbnjnoifekhgdo [2014-01-03]
CHR Extension: (CanvasDraw) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\knfimpamngmggpbamfoomdpebdoleghe [2014-01-03]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-10]
CHR Extension: (Google Maps) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2014-01-03]
CHR Extension: (iCloud Dashboard) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgojgddhfhekopdpkocobommepgdeffb [2015-03-10]
CHR Extension: (feedly) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndhinffkekpekljifjkkkkkhopnjodja [2014-01-03]
CHR Extension: (Highlight Keywords for Google Search) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhahncknpppipmgjchbbhehkfglelepf [2014-01-03]
CHR Extension: (Google Wallet) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-21]
CHR Extension: (Psykopaint) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgjchkcfmigkkhedgjedmffdepgmpfil [2015-01-20]
CHR Extension: (World Clocks 2) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjgoijhajhaahklokegbfnohialajpej [2014-01-03]
CHR Extension: (Gmail) - C:\Users\Dave.DOMAIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-03]
CHR HKU\S-1-5-21-2406339565-906508361-884548699-1165\SOFTWARE\Google\Chrome\Extensions\…\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\DAVE~1.DOM\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-11-16]
CHR HKU\S-1-5-21-2406339565-906508361-884548699-1165\SOFTWARE\Google\Chrome\Extensions\…\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\…\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-12-03]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-20] (Apple Inc.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4942384 2014-10-17] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173792 2014-06-03] (Microsoft Corp.)
S3 BoxSyncUpdateService; C:\Program Files\Box\Box Sync\SyncUpdaterService.exe [28696 2014-12-09] (Box, Inc.)
R2 BrcmMgmtAgent; C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe [163840 2011-11-30] (Broadcom Corporation) [File not signed]
S3 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\42.0.2311.36\remoting_host.exe [56648 2015-03-08] (Google Inc.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)
R2 DFEPService; C:\Program Files\Dell\Feature Enhancement Pack\DFEPService.exe [2280504 2012-08-15] (Dell Inc.)
R2 EmbassyService; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe [231792 2013-03-11] ()
R2 EMET_Service; C:\Program Files (x86)\EMET 5.1\EMET_Service.exe [31880 2014-11-09] (Microsoft Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [318568 2014-11-21] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22744 2014-10-15] (Microsoft Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-12] (Intel Corporation)
R2 KSS; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202080 2014-06-15] (Kaspersky Lab ZAO)
R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [555320 2014-12-10] (Malwarebytes Corporation)
R2 MSSQL$ACT7; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.ACT7\MSSQL\Binn\sqlservr.exe [43040096 2011-06-17] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 O2FLASH; C:\Windows\system32\o2flash.exe [244328 2011-11-16] (O2Micro International)
R2 O2SDIOAssist; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () [File not signed]
R2 PbaDrvSvc_x64; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\hapi64\pbadrvsvc.exe [21504 2013-01-21] (Dell, Inc.) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S4 SQLAgent$ACT7; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.ACT7\MSSQL\Binn\SQLAGENT.EXE [370016 2011-06-17] (Microsoft Corporation)
S2 tcsd_win32.exe; C:\Program Files (x86)\Security Innovation\SI TSS\bin\tcsd_win32.exe [1643520 2012-05-11] () [File not signed]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
R2 Wave Authentication Manager Service; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe [1773056 2013-02-26] (Wave Systems Corp.) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-10-03] (Microsoft Corporation)
R2 wltrysvc; C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe [6177280 2014-01-14] (Dell Inc.) [File not signed]
S2 WvPCR; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Common\WvPCR.exe [254824 2013-03-08] (Wave Systems Corp.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [209720 2014-11-04] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311608 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [240952 2014-10-17] (AVG Technologies CZ, s.r.o.)
R3 dcdbas; C:\Windows\System32\DRIVERS\dcdbas64.sys [39016 2012-09-23] (Dell Inc.)
R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [63064 2014-12-10] ()
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-11-13] (Intel Corporation)
R3 ST_ACCEL; C:\Windows\System32\DRIVERS\ST_ACCEL.sys [89312 2013-03-27] (STMicroelectronics)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-26 10:13 - 2015-03-26 10:14 - 00043659 _____ () C:\Users\Dave.DOMAIN\Desktop\FRST.txt
2015-03-26 09:22 - 2015-03-26 09:22 - 00000890 _____ () C:\Users\Dave.DOMAIN\Desktop\JRT.txt
2015-03-26 08:55 - 2015-03-26 08:55 - 01388782 _____ (Thisisu) C:\Users\Dave.DOMAIN\Desktop\JRT.exe
2015-03-26 08:37 - 2015-03-26 08:37 - 02168320 _____ () C:\Users\Dave.DOMAIN\Desktop\AdwCleaner.exe
2015-03-26 08:08 - 2015-03-26 08:08 - 00000000 ___HD () C:\OneDriveTemp
2015-03-25 17:21 - 2015-03-25 17:21 - 00852607 _____ () C:\Users\Dave.DOMAIN\Downloads\SecurityCheck(1).exe
2015-03-25 17:21 - 2015-03-25 16:59 - 00852607 _____ () C:\Users\Dave.DOMAIN\Desktop\SecurityCheck.exe
2015-03-25 16:58 - 2015-03-25 16:59 - 00852607 _____ () C:\Users\Dave.DOMAIN\Downloads\SecurityCheck.exe
2015-03-25 16:50 - 2015-03-24 11:49 - 02095616 _____ (Farbar) C:\Users\Dave.DOMAIN\Desktop\FRST64.exe
2015-03-25 04:33 - 2015-03-11 00:06 - 00943616 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-03-25 04:33 - 2015-03-11 00:06 - 00760832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-03-25 04:33 - 2015-03-11 00:06 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-03-25 04:33 - 2015-03-11 00:06 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-03-25 04:33 - 2015-03-11 00:05 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-03-25 04:33 - 2015-03-11 00:05 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-03-25 04:33 - 2015-03-11 00:05 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-03-25 04:33 - 2015-03-11 00:02 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-03-24 22:32 - 2015-03-24 22:32 - 00450892 ____R () C:\Windows\system32\Drivers\etc\hosts.20150324-223259.backup
2015-03-24 20:40 - 2015-03-24 20:40 - 02168320 _____ () C:\Users\Dave.DOMAIN\Downloads\AdwCleaner.exe
2015-03-24 15:59 - 2015-03-24 18:49 - 00000000 ____D () C:\Users\Dave.DOMAIN\Desktop\New folder
2015-03-24 15:35 - 2015-03-26 10:13 - 00000000 ____D () C:\FRST
2015-03-24 11:24 - 2015-03-24 11:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-24 10:49 - 2015-03-24 15:38 - 00000000 ____D () C:\ProgramData\Malwarebytes Anti-Exploit
2015-03-24 10:49 - 2015-03-24 10:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Exploit
2015-03-24 10:49 - 2015-03-24 10:49 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Exploit
2015-03-24 10:16 - 2015-03-24 10:16 - 00450892 ____R () C:\Windows\system32\Drivers\etc\hosts.20150324-101619.backup
2015-03-13 13:20 - 2015-03-26 10:06 - 00005010 _____ () C:\Windows\System32\Tasks\WSCEAA
2015-03-13 13:18 - 2015-03-25 16:53 - 00008396 _____ () C:\Windows\PFRO.log
2015-03-13 12:28 - 2015-03-13 12:28 - 00001079 _____ () C:\Users\Dave.DOMAIN\Desktop\Kaspersky Security Scan.lnk
2015-03-13 12:28 - 2015-03-13 12:28 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2015-03-13 12:28 - 2015-03-13 12:28 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2015-03-13 12:10 - 2015-03-13 12:10 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Local\DDMSettings
2015-03-13 12:07 - 2015-03-13 12:07 - 00001579 _____ () C:\Users\Dave.DOMAIN\Desktop\DivX Movies.lnk
2015-03-13 12:07 - 2015-03-13 12:07 - 00000000 ____D () C:\Program Files\DivX
2015-03-13 11:38 - 2015-03-13 12:28 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-03-13 10:53 - 2015-03-26 08:59 - 00001120 _____ () C:\Windows\setupact.log
2015-03-13 10:53 - 2015-03-13 10:53 - 00000000 _____ () C:\Windows\setuperr.log
2015-03-12 23:17 - 2015-03-12 23:17 - 00450892 ____R () C:\Windows\system32\Drivers\etc\hosts.20150312-231747.backup
2015-03-12 21:42 - 2015-03-12 21:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2015-03-12 17:32 - 2015-03-12 17:32 - 00002141 _____ () C:\Users\Public\Desktop\Google Earth Pro.lnk
2015-03-12 17:32 - 2015-03-12 17:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro
2015-03-11 00:12 - 2015-02-20 00:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 00:12 - 2015-02-20 00:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 00:12 - 2015-02-20 00:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 00:12 - 2015-02-20 00:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 00:12 - 2015-02-20 00:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 00:12 - 2015-02-20 00:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 00:12 - 2015-02-20 00:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 00:12 - 2015-02-20 00:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 00:12 - 2015-02-19 23:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 00:12 - 2015-02-19 23:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 00:12 - 2015-02-02 23:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 00:12 - 2015-02-02 23:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 00:12 - 2015-02-02 23:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 00:12 - 2015-02-02 23:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 00:12 - 2015-02-02 23:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 00:12 - 2015-02-02 23:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 00:12 - 2015-02-02 23:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 00:12 - 2015-02-02 23:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 00:12 - 2015-02-02 23:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 00:12 - 2015-02-02 23:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 00:12 - 2015-02-02 23:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 00:12 - 2015-02-02 23:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 00:12 - 2015-02-02 23:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 00:12 - 2015-02-02 23:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 00:12 - 2015-02-02 23:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 00:12 - 2015-02-02 23:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 00:12 - 2015-02-02 23:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 00:12 - 2015-02-02 23:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 00:12 - 2015-02-02 23:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 00:12 - 2015-02-02 23:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 00:12 - 2015-02-02 23:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 00:12 - 2015-02-02 23:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 00:12 - 2015-02-02 22:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 00:12 - 2014-10-31 18:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 00:11 - 2015-03-06 01:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 00:11 - 2015-03-06 01:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 00:11 - 2015-03-06 01:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 00:11 - 2015-03-06 01:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 00:11 - 2015-03-06 01:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 00:11 - 2015-03-06 01:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 00:11 - 2015-03-06 01:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 00:11 - 2015-03-06 01:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 00:11 - 2015-03-06 01:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 00:11 - 2015-03-06 01:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 00:11 - 2015-03-06 01:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 00:11 - 2015-03-06 01:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 00:11 - 2015-03-06 01:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 00:11 - 2015-03-06 01:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 00:11 - 2015-03-06 01:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 00:11 - 2015-03-06 01:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 00:11 - 2015-03-06 01:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 00:11 - 2015-03-06 01:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 00:11 - 2015-03-06 01:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 00:11 - 2015-03-06 01:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 00:11 - 2015-03-06 01:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 00:11 - 2015-03-06 01:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 00:11 - 2015-03-06 01:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 00:11 - 2015-03-06 01:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 00:11 - 2015-03-06 01:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 00:11 - 2015-03-06 01:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 00:11 - 2015-03-06 01:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 00:11 - 2015-03-06 01:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 00:11 - 2015-03-06 01:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 00:11 - 2015-03-06 01:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 00:11 - 2015-03-06 01:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 00:11 - 2015-02-25 23:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 00:11 - 2015-02-13 01:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 00:11 - 2015-02-13 01:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 00:11 - 2015-02-02 23:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 00:11 - 2015-02-02 23:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 00:11 - 2015-02-02 23:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 00:11 - 2015-02-02 23:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 00:11 - 2015-02-02 23:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 00:11 - 2015-02-02 23:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 00:11 - 2015-02-02 23:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 00:11 - 2015-02-02 23:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 00:11 - 2015-02-02 23:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 00:11 - 2015-02-02 23:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 00:11 - 2015-02-02 23:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 00:11 - 2015-02-02 23:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 00:11 - 2015-02-02 23:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 00:11 - 2015-02-02 23:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 00:11 - 2015-02-02 23:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 00:11 - 2015-02-02 23:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 00:11 - 2015-01-30 23:48 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-03-11 00:11 - 2015-01-30 23:48 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-11 00:11 - 2015-01-30 19:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 00:11 - 2015-01-30 19:56 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-03-11 00:11 - 2015-01-16 22:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 00:11 - 2015-01-16 22:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 00:10 - 2015-02-23 23:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 00:10 - 2015-02-23 22:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 00:10 - 2015-02-20 21:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 00:10 - 2015-02-20 20:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 00:10 - 2015-02-20 20:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 00:10 - 2015-02-20 20:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 00:10 - 2015-02-20 20:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 00:10 - 2015-02-20 19:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 00:10 - 2015-02-20 19:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 00:10 - 2015-02-19 23:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 00:10 - 2015-02-19 23:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 00:10 - 2015-02-19 22:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 00:10 - 2015-02-19 22:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 00:10 - 2015-02-19 22:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-11 00:10 - 2015-02-19 22:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 00:10 - 2015-02-19 22:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-11 00:10 - 2015-02-19 22:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 00:10 - 2015-02-19 22:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 00:10 - 2015-02-19 22:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 00:10 - 2015-02-19 22:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-11 00:10 - 2015-02-19 22:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-11 00:10 - 2015-02-19 22:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-11 00:10 - 2015-02-19 22:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 00:10 - 2015-02-19 22:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 00:10 - 2015-02-19 22:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 00:10 - 2015-02-19 22:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 00:10 - 2015-02-19 22:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 00:10 - 2015-02-19 22:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 00:10 - 2015-02-19 22:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 00:10 - 2015-02-19 22:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 00:10 - 2015-02-19 22:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-03-11 00:10 - 2015-02-19 22:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-11 00:10 - 2015-02-19 22:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 00:10 - 2015-02-19 22:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 00:10 - 2015-02-19 22:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 00:10 - 2015-02-19 22:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 00:10 - 2015-02-19 21:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 00:10 - 2015-02-19 21:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-03-11 00:10 - 2015-02-19 21:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-03-11 00:10 - 2015-02-19 21:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 00:10 - 2015-02-19 21:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 00:10 - 2015-02-19 21:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-11 00:10 - 2015-02-19 21:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 00:10 - 2015-02-19 21:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 00:10 - 2015-02-19 21:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-11 00:10 - 2015-02-19 21:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 00:10 - 2015-02-19 21:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 00:10 - 2015-02-19 21:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 00:10 - 2015-02-19 21:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 00:10 - 2015-02-19 21:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 00:10 - 2015-02-19 21:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-03-11 00:10 - 2015-02-19 21:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 00:10 - 2015-02-19 21:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-11 00:10 - 2015-02-19 21:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 00:10 - 2015-02-19 20:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 00:10 - 2015-02-19 20:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-03-11 00:08 - 2015-02-03 23:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 00:08 - 2015-02-03 22:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-10 15:45 - 2015-03-12 22:48 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Roaming\NCH Software
2015-03-10 15:45 - 2015-03-12 22:48 - 00000000 ____D () C:\Program Files (x86)\NCH Software
2015-03-10 15:45 - 2015-03-12 22:42 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2015-03-10 15:45 - 2015-03-10 15:45 - 00000000 ____D () C:\ProgramData\NCH Software
2015-03-10 15:32 - 2015-03-10 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\(Default)
2015-03-10 15:32 - 2015-03-10 15:35 - 00000000 ____D () C:\Program Files (x86)\rSpark
2015-03-10 15:14 - 2015-03-26 09:02 - 00000000 ___RD () C:\Users\Dave.DOMAIN\iCloudDrive
2015-03-10 15:14 - 2015-03-10 15:14 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Local\Apple Inc
2015-03-10 14:21 - 2015-03-10 14:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2015-03-10 13:57 - 2015-03-10 13:57 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Roaming\PPP
2015-03-10 12:52 - 2015-03-10 12:52 - 00098816 _____ () C:\Users\Dave.DOMAIN\Documents\Struktol 03-10-15 AO-1010 Price Quote.msg
2015-03-05 00:13 - 2015-03-05 10:42 - 00000000 ____D () C:\Users\Dave.DOMAIN\Downloads\Patty Griffin - 1000 Kisses
2015-03-05 00:08 - 2015-03-05 03:06 - 00000000 ____D () C:\Users\Dave.DOMAIN\Downloads\Patty Griffin - Imposible Dream [2004] [Folk] [www.file24ever.com]
2015-03-04 23:44 - 2015-03-05 01:51 - 00000000 ____D () C:\Users\Dave.DOMAIN\Downloads\Patty Griffin…Downtown Church(2010)[FLAC]
2015-03-04 23:43 - 2015-03-05 03:57 - 00000000 ____D () C:\Users\Dave.DOMAIN\Downloads\Patty Griffin…Flaming Red(1998)[FLAC]
2015-03-04 23:42 - 2015-03-05 10:23 - 00000000 ____D () C:\Users\Dave.DOMAIN\Downloads\Patty Griffin…Living With Ghosts(1996)[FLAC]
2015-03-02 17:24 - 2015-03-02 17:24 - 00184882 _____ () C:\Users\Dave.DOMAIN\Desktop\GOOGLE MAPS.htm
2015-02-25 18:00 - 2015-01-08 19:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-25 18:00 - 2015-01-08 19:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-24 16:55 - 2015-02-24 16:55 - 00033792 _____ () C:\Users\Dave.DOMAIN\Desktop\Copy of 2nd_half_2014_F00038.xls

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-26 10:13 - 2013-10-21 22:41 - 00000000 ____D () C:\Users\Dave.DOMAIN\Documents\Outlook Files
2015-03-26 10:09 - 2013-10-21 22:18 - 00000000 ____D () C:\ProgramData\MFAData
2015-03-26 09:46 - 2013-10-21 21:57 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-26 09:25 - 2013-11-26 14:16 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-26 09:19 - 2014-12-28 16:33 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Roaming\Copy
2015-03-26 09:14 - 2014-03-17 10:23 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Local\B1051AE5-E9E6-41A9-BD65-34CA3E0AF52B.aplzod
2015-03-26 09:14 - 2009-07-14 00:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-26 09:14 - 2009-07-14 00:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-26 09:10 - 2014-07-09 14:04 - 01239871 _____ () C:\Windows\WindowsUpdate.log
2015-03-26 09:04 - 2014-12-28 14:48 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Local\Box Sync
2015-03-26 09:04 - 2013-10-21 22:59 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Roaming\Dropbox
2015-03-26 09:04 - 2013-10-21 21:53 - 00000000 ___RD () C:\Users\Dave.DOMAIN\Documents\Dropbox
2015-03-26 09:03 - 2013-10-22 10:02 - 00000000 ___RD () C:\Users\Dave.DOMAIN\Google Drive
2015-03-26 09:02 - 2014-06-19 23:04 - 00000000 ___RD () C:\Users\Dave.DOMAIN\OneDrive
2015-03-26 09:01 - 2013-10-21 21:57 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-26 09:01 - 2013-10-21 12:37 - 00000120 _____ () C:\Windows\system32\config\netlogon.ftl
2015-03-26 08:59 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-26 08:56 - 2013-11-16 22:59 - 00000000 ____D () C:\AdwCleaner
2015-03-25 17:50 - 2014-12-28 14:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Box Sync
2015-03-25 16:58 - 2013-10-21 22:57 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Local\Apple
2015-03-25 14:31 - 2009-07-14 01:08 - 00032634 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-25 09:32 - 2014-12-10 18:49 - 00000000 ____D () C:\Windows\system32\appraiser
2015-03-25 09:32 - 2014-04-23 17:07 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-03-24 20:46 - 2013-11-26 13:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-24 14:47 - 2013-10-21 21:57 - 00000000 ____D () C:\Program Files (x86)\Google
2015-03-24 10:16 - 2014-06-25 23:14 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-24 10:16 - 2009-07-13 22:34 - 00450892 ____R () C:\Windows\system32\Drivers\etc\hosts.20150324-223243.backup
2015-03-23 15:16 - 2011-02-10 10:33 - 00888768 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-03-23 15:16 - 2009-07-14 01:13 - 00888768 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-23 13:54 - 2013-10-21 21:51 - 00000000 ____D () C:\ProgramData\Sonic
2015-03-21 06:27 - 2014-07-18 16:08 - 00000000 ____D () C:\Users\Dave
2015-03-17 05:43 - 2009-07-13 22:34 - 00450892 ____R () C:\Windows\system32\Drivers\etc\hosts.20150324-101609.backup
2015-03-17 04:03 - 2013-10-21 11:09 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-03-14 10:35 - 2013-10-23 20:43 - 00000000 ____D () C:\Program Files\Google
2015-03-13 14:39 - 2013-10-23 20:43 - 00000000 ____D () C:\ProgramData\Google
2015-03-13 14:39 - 2013-10-21 21:57 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Local\Google
2015-03-13 14:38 - 2014-07-07 12:17 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Roaming\uTorrent
2015-03-13 13:18 - 2013-10-03 00:07 - 00000000 ____D () C:\Windows\{69093D49-3DD1-4FB5-A378-0D4DB4CF86EA}
2015-03-13 12:07 - 2015-02-01 12:02 - 00001129 _____ () C:\Users\Public\Desktop\DivX Converter.lnk
2015-03-13 12:07 - 2015-02-01 12:02 - 00001064 _____ () C:\Users\Public\Desktop\DivX Player.lnk
2015-03-13 12:07 - 2015-01-08 09:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2015-03-13 12:07 - 2015-01-08 09:50 - 00000000 ____D () C:\ProgramData\DivX
2015-03-13 12:07 - 2015-01-08 09:50 - 00000000 ____D () C:\Program Files (x86)\DivX
2015-03-13 11:06 - 2014-12-28 14:51 - 00000000 ___RD () C:\Users\Dave.DOMAIN\Box Sync
2015-03-12 23:17 - 2009-07-13 22:34 - 00450892 ____R () C:\Windows\system32\Drivers\etc\hosts.20150317-054315.backup
2015-03-12 22:54 - 2015-01-26 12:31 - 00000000 ____D () C:\Users\Dave.DOMAIN\Desktop\MOVIES
2015-03-12 22:52 - 2015-02-01 00:40 - 00007168 _____ () C:\Users\Dave.DOMAIN\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-03-12 16:48 - 2013-10-22 10:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-03-11 18:48 - 2013-10-21 21:05 - 122905856 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-11 11:37 - 2013-10-21 22:41 - 00000000 ____D () C:\Users\Dave.DOMAIN\Documents\My Scans
2015-03-11 11:09 - 2009-07-14 01:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-11 04:01 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\rescache
2015-03-11 03:21 - 2009-07-14 00:45 - 00456320 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-11 03:18 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-11 03:18 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-11 03:08 - 2013-10-21 21:05 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-10 23:12 - 2014-06-19 23:04 - 00002138 _____ () C:\Users\Dave.DOMAIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-03-10 23:01 - 2013-11-02 11:59 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Roaming\KeeperData
2015-03-10 15:55 - 2013-11-04 09:21 - 00000099 _____ () C:\Users\Public\LMDebug.log
2015-03-10 15:23 - 2013-10-21 20:18 - 00000000 ____D () C:\Users\Dave.DOMAIN
2015-03-10 15:13 - 2013-10-21 22:57 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Roaming\Apple Computer
2015-03-10 14:32 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-03-10 11:25 - 2013-10-21 23:01 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-03-06 14:23 - 2014-12-28 17:34 - 00000000 ____D () C:\Users\Dave.DOMAIN\Documents\Visual Studio 2013
2015-03-04 00:00 - 2015-01-20 16:37 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Roaming\Audacity
2015-03-03 21:07 - 2014-08-19 20:53 - 00000000 ____D () C:\Users\Dave.DOMAIN\AppData\Local\Adobe
2015-03-03 21:06 - 2013-11-26 14:16 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-03-03 21:06 - 2013-10-02 23:46 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-03-03 21:06 - 2013-10-02 23:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-27 09:48 - 2013-10-21 20:19 - 00097712 _____ () C:\Users\Dave.DOMAIN\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-27 09:28 - 2013-11-17 15:53 - 00000000 ____D () C:\Users\Dave.DOMAIN\Documents\Registry BackUp
2015-02-27 09:25 - 2014-12-19 09:25 - 00000824 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-27 09:25 - 2013-10-21 21:56 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-26 10:02 - 2014-12-28 16:34 - 00000000 ___RD () C:\Users\Dave.DOMAIN\Copy

==================== Files in the root of some directories =======

2014-12-07 21:34 - 2014-12-07 21:34 - 3502600 _____ (Swiftpage ACT LLC                                           ) C:\Users\Dave.DOMAIN\AppData\Roaming\act170hf1ss.exe
2014-12-07 21:47 - 2014-12-07 21:47 - 0000000 ____H () C:\Users\Dave.DOMAIN\AppData\Roaming\ActUpdate.log
2014-04-01 08:46 - 2014-12-07 22:10 - 0038557 _____ () C:\Users\Dave.DOMAIN\AppData\Roaming\Comma Separated Values.ADR
2014-04-24 22:51 - 2015-01-08 09:10 - 0099384 _____ () C:\Users\Dave.DOMAIN\AppData\Roaming\inst.exe
2014-12-07 21:44 - 2014-12-07 21:44 - 0032470 _____ () C:\Users\Dave.DOMAIN\AppData\Roaming\NGEN_AppLog_Install.txt
2015-01-08 09:26 - 2015-01-08 09:26 - 0009773 _____ () C:\Users\Dave.DOMAIN\AppData\Roaming\NGEN_AppLog_Uninstall.txt
2014-04-24 22:51 - 2015-01-08 09:10 - 0007859 _____ () C:\Users\Dave.DOMAIN\AppData\Roaming\pcouffin.cat
2014-04-24 22:51 - 2015-01-08 09:10 - 0001167 _____ () C:\Users\Dave.DOMAIN\AppData\Roaming\pcouffin.inf
2014-04-24 22:52 - 2015-01-08 09:10 - 0000033 _____ () C:\Users\Dave.DOMAIN\AppData\Roaming\pcouffin.log
2014-04-24 22:51 - 2015-01-08 09:10 - 0082816 _____ (VSO Software) C:\Users\Dave.DOMAIN\AppData\Roaming\pcouffin.sys
2015-02-01 00:40 - 2015-03-12 22:52 - 0007168 _____ () C:\Users\Dave.DOMAIN\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-07 14:34 - 2014-07-13 17:43 - 0000008 ____H () C:\Users\Dave.DOMAIN\AppData\Local\L8457789110
2014-01-07 12:36 - 2014-01-07 12:36 - 0007663 _____ () C:\Users\Dave.DOMAIN\AppData\Local\Resmon.ResmonCfg
2013-10-27 23:13 - 2013-11-04 21:43 - 0002361 _____ () C:\ProgramData\hpzinstall.log
2014-02-06 13:00 - 2015-02-22 13:24 - 0000614 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2014-11-14 16:35 - 2014-11-14 16:52 - 83783471 _____ () C:\ProgramData\SEC74C4.tmp
2014-11-14 16:10 - 2014-11-14 16:15 - 85752016 _____ () C:\ProgramData\SEC8197.tmp
2014-07-18 16:09 - 2014-07-18 16:09 - 0001534 _____ () C:\ProgramData\ss.ini

Some content of TEMP:
====================
C:\Users\Dave.DOMAIN\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpunyhf5.dll
C:\Users\Dave.DOMAIN\AppData\Local\Temp\Quarantine.exe
C:\Users\Dave.DOMAIN\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-03-25 00:29

==================== End Of Log ============================

How is the computer running? Still slow start up. My outlook still requires my selecting an account (even though only one account exists) each time I open Outlook. It had not done that prior to when I believe I was infected. Otherwise, it seems to be running okay.

OCD

Post #6March 26, 2015, 3:45 PM UTC

Hi dfkelly,

Before we proceed I need to ask if this is a business computer?

dfkelly

Post #7March 26, 2015, 4:09 PM UTC

No, but I can access business related stuff (i.e., email).

OCD

Post #8March 26, 2015, 5:24 PM UTC

Hi dfkelly,

Thank you.

Have you installed any new software recently, or any new browser add-ons?

Which browser/s do you experience the Outlook issues when trying to log in?

[external image: bullseye_zpse9eaf36e.gif] Uninstall via Programs and Features

Click Start > Control Panel > Programs and Features. Locate and select the following that are present on the list and click the Remove button:

Java 7 Update 45
Adobe Flash Player 16.0.0.305

=========================

[external image: bullseye_zpse9eaf36e.gif] Update Java

Get the current version of Java (Version 8 Update 40) by going to http://java.com/en/download/windows_xpi.jsp
Select the Verify Java Version button and follow the onscreen instructions to update if necessary.

=========================

[external image: bullseye_zpse9eaf36e.gif] Adobe Flash Player:

Go to http://get.adobe.com/flashplayer/?no_ab=1

Remove the check mark from the box "any third party software offered"
Click the Download button, and follow the onscreen directions to complete the installation.

Please note, depending on your settings, you may have to temporarily disable your antivirus software for the Adobe Reader update.

=========================

[external image: bullseye_zpse9eaf36e.gif] FRST Fix Script

Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it on the desktop as fixlist.txt

Start
CloseProcesses:
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2406339565-906508361-884548699-1165 -> {47FD7C97-10E8-4537-8453-7400D4A144EE} URL = http://search.yahoo….petb&type=10743
SearchScopes: HKU\S-1-5-21-2406339565-906508361-884548699-1165 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = https://www.google.c…1I7NDKB_enUS559
EmptyTemp:
CMD: ipconfig /flushdns
End

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST and press the Fix button just once and wait.
The tool will make a log (Fixlog.txt) please post it to your reply.

=========================

[external image: bullseye_zpse9eaf36e.gif] Reboot

=========================

In your next post please provide the following:

Fixlog.txt
Any change in performance?
Answer any questions I might have asked.

dfkelly

Post #9March 26, 2015, 7:02 PM UTC

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by [removed] at 2015-03-26 14:45:40 Run:3
Running from C:\Users\[removed]\Desktop
[removed] Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2406339565-906508361-884548699-1165 -> {47FD7C97-10E8-4537-8453-7400D4A144EE} URL = http://search.yahoo….petb&type=10743
SearchScopes: HKU\S-1-5-21-2406339565-906508361-884548699-1165 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = https://www.google.c…1I7NDKB_enUS559
EmptyTemp:
CMD: ipconfig /flushdns
End
*****************

Processes closed successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-2406339565-906508361-884548699-1165\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{47FD7C97-10E8-4537-8453-7400D4A144EE}" => Key deleted successfully.
HKCR\CLSID\{47FD7C97-10E8-4537-8453-7400D4A144EE} => Key not found.
"HKU\S-1-5-21-2406339565-906508361-884548699-1165\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Key deleted successfully.
HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found.

========= ipconfig /flushdns =========

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

EmptyTemp: => Removed 190.9 MB temporary data.

The system needed a reboot.

==== End of Fixlog 14:46:08 ====

Performance seems to have improved a little.

New Software:

Google Chrome Remote Access 3/24/15

Malware Anti-Exploit

Google Earth Plug-In

Google Earth Pro

Turbo Tax 2014 2/22/15

ALSO, I was unable to install Javsa update. Received error message 1603

OCD

Post #10March 27, 2015, 4:26 AM UTC

Hi dfkelly ,

Did the performance issues occur prior to installing the new software?

ALSO, I was unable to install Javsa update. Received error message 1603

https://www.java.com/en/download/help/error_1603.xml

According to the page liste above, there is a conflict with a Microsoft update KB2918614. Please uninstall it and try again.

=========================

[external image: bullseye_zpse9eaf36e.gif] Malwarebytes' Anti-Malware

Download Malwarebytes' Anti-Malware (save it to your desktop).

- Windows XP : Double click on the icon to run it.
- Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
Select Scan tab.
[external image: MBAMDashboard_zpsddef9b5f.gif]
Select type of scan to perform:
[external image: MBAMScanTab_zps2c5e74bd.gif]
- Threat Scan < — Select this type of scan
- Custom Scan
- Hyper Scan
Next click the Scan button.
When the scan is complete, if no malicious items are found you can close the program.
If malicious items are found be sure that everything is checked, and click Quarantine .
When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.

=========================

[external image: bullseye_zpse9eaf36e.gif] ESET Online Scanner

*Note:

It is recommended to disable on-board antivirus program and anti-spyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your anti-spyware programs.

** You need to run your browser with Administrator Rights, to do so right click your browsers short cut and select "Run as Administrator".

= = = = = = = = = = = = = = = = = = = =

Go here to run ESET Online Scanner

(Note: You can use Internet Explorer or FireFox for this scan. If you use FireFox you will be asked to install an additional component. Please allow this.)

Tick the box next to YES, I accept the Terms of Use.
Click Start
When asked, allow the activex control to install
Disable your Antivirus software. You can usually do this with its Notification Tray icon near the clock
Click Start
Make sure that the option "Remove found threats" is Checked, and the option "Scan unwanted applications" is Checked.
Click Scan.
Wait for the scan to finish.
When the scan completes, click List of found threats
click Export to Text file and save the file to your desktop using a unique name, such as ESETScan.
Include the contents of this report in your next reply

Note - when ESET doesn't find any threats, no report will be created.
Push the back button.
Push Finish
Re-enable your Antivirus software.

=========================

In your next post please provide the following:

MBAM log
ESET's log.txt
Update on Java install
Answer to any questions I may have asked.

dfkelly

Post #11March 27, 2015, 4:05 PM UTC

Did the performance issues occur prior to installing the new software? Yes.

I tried reinstalling Java with same results. I noticed, however, that Internet Explorer is not functioning. I cannot open it and it does not open when clicking a link that would typically result in opening up in IE (FYI, IE is currently set as default browser). When trying to open it, a message appears, acroess the top of the window (Not Responding), then IE closes down. I tried reinstalling IE, but recevied a message that the version I was trying to install was older that the currently installed version. I then tried to uninstall IE, but it is not listed in the Uninstall Programs listing. Not usre if this is related to the fact I cannot install Java but thought it worth mentioning.

Malwawarebytes Scan found no threats.

ESET found no infected files

OCD

Post #12March 27, 2015, 4:34 PM UTC

Hi dfkelly,

Did the performance issues occur prior to installing the new software? Yes.

So we can rule out those causing your issues.

Malwawarebytes Scan found no threats.
ESET found no infected files

FYI, IE is currently set as default browser

According to the header in your FRST log FF is your default browser.
Internet Explorer Version 11 (Default browser: FF)

=========================

[external image: bullseye_zpse9eaf36e.gif] Uninstall Internet Explorer

Go to the Start button, the Control Panel
Next ppen Programs and Features
Then in the left hand menu select View Installed Updates
Scroll down and locate Internet Explorer 11
Click on it and select Uninstall

=========================

[external image: bullseye_zpse9eaf36e.gif] Reboot

=========================

[external image: bullseye_zpse9eaf36e.gif] Internet Explorer 11

Go here and download a new copy of Internet Explorer 11
Follow the onscreen instructions to download and install.
Be sure to be mindful of any third party add-ons offered.

=========================

Report back with the results.

dfkelly

Post #13March 27, 2015, 5:48 PM UTC

Uninstalled IE

Restarted

Attempted to install IE

Received Error

"Internet Explorer did not finish installing

For more information, see the Internet Explorer Troubleshooter."

OCD

Post #14March 28, 2015, 4:35 PM UTC

Hi dfkelly,

Did you try the Internet Explorer Troubleshooter?

[external image: bullseye_zpse9eaf36e.gif] System File Checker (SFC)

Click on the Start button and in the Search programs and files box type the following:
- command
Don't press Enter, just let the search results populate above.
In the search results, locate the Programs section.
Locate the Command Prompt shortcut and right-click on it.
Select Run as administrator.
Click Yes on the User Account Control window that appears.
Important: If you see a User Account Control window but also a message that says To continue, type an administrator password, and then click Yes, then your user account must be a standard account, not an administrator account. Before you can click Yes and open an elevated command prompt, you'll need to type the password of another user on your Windows 7 computer that has administrator level privileges.
Note: You will not see this window at all if your User Account Control settings are turned all the way down. See How To Disable User Account Control in Windows 7 for more information.
An elevated Command Prompt window will appear.
- Type: sfc /scannow (There's a space between sfc and /scannow.) , then hit Enter
Let the check run to completion. DO NOT reboot the PC or close the cmd window.
Copy & Paste the following command at the Command Prompt and press Enter:

findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >%userprofile%\Desktop\sfcdetails.txt
This will place a file on your desktop called sfcdetails.txt which contains the results of the scan.
Copy and Paste the contents of the file into your next post.
After the scan runs type exit to close the command prompt window

=========================

In your next post please provide the following:

sfcdetails.txt

dfkelly

Post #15March 29, 2015, 2:21 PM UTC

I did not use the IE troubleshooter, but I uninstalled IE 11, then uninstalled IE 10. I still had IE on the computer (I had an older style icon on the desktop) which said it was IE 8. IE 8 had the same issue in that the window would start to open and the top of the window had the message (not responding), then it closes. I then reinstalled IE 11 and it still would open. same message (not responding) and the window will not stay open.

Is it normal to have the previous versions on the computer as you uninstall later versions? I did not go beyond IE 8 (and don't know what happened to IE 9) but wondered if I kept going would I keep seeing previous versions.

2015-03-29 10:01:48, Info CSI 00000009 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:01:48, Info CSI 0000000a [SR] Beginning Verify and Repair transaction

2015-03-29 10:01:50, Info CSI 0000000c [SR] Verify complete

2015-03-29 10:01:51, Info CSI 0000000d [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:01:51, Info CSI 0000000e [SR] Beginning Verify and Repair transaction

2015-03-29 10:01:53, Info CSI 00000010 [SR] Verify complete

2015-03-29 10:01:53, Info CSI 00000011 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:01:53, Info CSI 00000012 [SR] Beginning Verify and Repair transaction

2015-03-29 10:01:55, Info CSI 00000014 [SR] Verify complete

2015-03-29 10:01:55, Info CSI 00000015 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:01:55, Info CSI 00000016 [SR] Beginning Verify and Repair transaction

2015-03-29 10:01:57, Info CSI 00000018 [SR] Verify complete

2015-03-29 10:01:57, Info CSI 00000019 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:01:57, Info CSI 0000001a [SR] Beginning Verify and Repair transaction

2015-03-29 10:01:59, Info CSI 0000001c [SR] Verify complete

2015-03-29 10:02:00, Info CSI 0000001d [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:00, Info CSI 0000001e [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:01, Info CSI 00000020 [SR] Verify complete

2015-03-29 10:02:02, Info CSI 00000021 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:02, Info CSI 00000022 [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:03, Info CSI 00000024 [SR] Verify complete

2015-03-29 10:02:04, Info CSI 00000025 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:04, Info CSI 00000026 [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:06, Info CSI 00000028 [SR] Verify complete

2015-03-29 10:02:06, Info CSI 00000029 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:06, Info CSI 0000002a [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:08, Info CSI 0000002c [SR] Verify complete

2015-03-29 10:02:08, Info CSI 0000002d [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:08, Info CSI 0000002e [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:10, Info CSI 00000030 [SR] Verify complete

2015-03-29 10:02:10, Info CSI 00000031 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:10, Info CSI 00000032 [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:13, Info CSI 00000034 [SR] Verify complete

2015-03-29 10:02:13, Info CSI 00000035 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:13, Info CSI 00000036 [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:16, Info CSI 00000038 [SR] Verify complete

2015-03-29 10:02:16, Info CSI 00000039 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:16, Info CSI 0000003a [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:18, Info CSI 0000003c [SR] Verify complete

2015-03-29 10:02:18, Info CSI 0000003d [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:18, Info CSI 0000003e [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:21, Info CSI 00000040 [SR] Verify complete

2015-03-29 10:02:21, Info CSI 00000041 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:21, Info CSI 00000042 [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:23, Info CSI 00000044 [SR] Verify complete

2015-03-29 10:02:23, Info CSI 00000045 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:23, Info CSI 00000046 [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:25, Info CSI 00000048 [SR] Verify complete

2015-03-29 10:02:25, Info CSI 00000049 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:25, Info CSI 0000004a [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:27, Info CSI 0000004c [SR] Verify complete

2015-03-29 10:02:27, Info CSI 0000004d [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:27, Info CSI 0000004e [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:31, Info CSI 00000050 [SR] Verify complete

2015-03-29 10:02:31, Info CSI 00000051 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:31, Info CSI 00000052 [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:33, Info CSI 00000054 [SR] Verify complete

2015-03-29 10:02:33, Info CSI 00000055 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:33, Info CSI 00000056 [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:35, Info CSI 00000058 [SR] Verify complete

2015-03-29 10:02:35, Info CSI 00000059 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:35, Info CSI 0000005a [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:41, Info CSI 0000005d [SR] Verify complete

2015-03-29 10:02:41, Info CSI 0000005e [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:41, Info CSI 0000005f [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:46, Info CSI 00000064 [SR] Verify complete

2015-03-29 10:02:46, Info CSI 00000065 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:46, Info CSI 00000066 [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:50, Info CSI 00000068 [SR] Verify complete

2015-03-29 10:02:50, Info CSI 00000069 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:50, Info CSI 0000006a [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:54, Info CSI 0000006d [SR] Verify complete

2015-03-29 10:02:54, Info CSI 0000006e [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:54, Info CSI 0000006f [SR] Beginning Verify and Repair transaction

2015-03-29 10:02:58, Info CSI 00000071 [SR] Verify complete

2015-03-29 10:02:58, Info CSI 00000072 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:02:58, Info CSI 00000073 [SR] Beginning Verify and Repair transaction

2015-03-29 10:03:02, Info CSI 00000095 [SR] Verify complete

2015-03-29 10:03:03, Info CSI 00000096 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:03:03, Info CSI 00000097 [SR] Beginning Verify and Repair transaction

2015-03-29 10:03:06, Info CSI 0000009c [SR] Verify complete

2015-03-29 10:03:06, Info CSI 0000009d [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:03:06, Info CSI 0000009e [SR] Beginning Verify and Repair transaction

2015-03-29 10:03:16, Info CSI 000000a0 [SR] Verify complete

2015-03-29 10:03:17, Info CSI 000000a1 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:03:17, Info CSI 000000a2 [SR] Beginning Verify and Repair transaction

2015-03-29 10:03:24, Info CSI 000000a4 [SR] Verify complete

2015-03-29 10:03:25, Info CSI 000000a5 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:03:25, Info CSI 000000a6 [SR] Beginning Verify and Repair transaction

2015-03-29 10:03:31, Info CSI 000000a8 [SR] Verify complete

2015-03-29 10:03:32, Info CSI 000000a9 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:03:32, Info CSI 000000aa [SR] Beginning Verify and Repair transaction

2015-03-29 10:03:35, Info CSI 000000ac [SR] Verify complete

2015-03-29 10:03:35, Info CSI 000000ad [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:03:35, Info CSI 000000ae [SR] Beginning Verify and Repair transaction

2015-03-29 10:03:38, Info CSI 000000b0 [SR] Verify complete

2015-03-29 10:03:38, Info CSI 000000b1 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:03:38, Info CSI 000000b2 [SR] Beginning Verify and Repair transaction

2015-03-29 10:03:44, Info CSI 000000d5 [SR] Verify complete

2015-03-29 10:03:44, Info CSI 000000d6 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:03:44, Info CSI 000000d7 [SR] Beginning Verify and Repair transaction

2015-03-29 10:03:51, Info CSI 000000d9 [SR] Verify complete

2015-03-29 10:03:51, Info CSI 000000da [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:03:51, Info CSI 000000db [SR] Beginning Verify and Repair transaction

2015-03-29 10:03:59, Info CSI 000000dd [SR] Verify complete

2015-03-29 10:03:59, Info CSI 000000de [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:03:59, Info CSI 000000df [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:07, Info CSI 000000e3 [SR] Verify complete

2015-03-29 10:04:07, Info CSI 000000e4 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:07, Info CSI 000000e5 [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:10, Info CSI 000000e7 [SR] Verify complete

2015-03-29 10:04:10, Info CSI 000000e8 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:10, Info CSI 000000e9 [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:11, Info CSI 000000eb [SR] Verify complete

2015-03-29 10:04:11, Info CSI 000000ec [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:11, Info CSI 000000ed [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:12, Info CSI 000000ef [SR] Verify complete

2015-03-29 10:04:12, Info CSI 000000f0 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:12, Info CSI 000000f1 [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:17, Info CSI 00000102 [SR] Verify complete

2015-03-29 10:04:17, Info CSI 00000103 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:17, Info CSI 00000104 [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:21, Info CSI 00000108 [SR] Verify complete

2015-03-29 10:04:21, Info CSI 00000109 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:21, Info CSI 0000010a [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:22, Info CSI 0000010c [SR] Verify complete

2015-03-29 10:04:23, Info CSI 0000010d [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:23, Info CSI 0000010e [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:26, Info CSI 00000110 [SR] Verify complete

2015-03-29 10:04:26, Info CSI 00000111 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:26, Info CSI 00000112 [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:29, Info CSI 00000114 [SR] Verify complete

2015-03-29 10:04:30, Info CSI 00000115 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:30, Info CSI 00000116 [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:36, Info CSI 00000119 [SR] Verify complete

2015-03-29 10:04:36, Info CSI 0000011a [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:36, Info CSI 0000011b [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:41, Info CSI 0000011e [SR] Verify complete

2015-03-29 10:04:41, Info CSI 0000011f [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:41, Info CSI 00000120 [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:43, Info CSI 00000122 [SR] Verify complete

2015-03-29 10:04:43, Info CSI 00000123 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:43, Info CSI 00000124 [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:44, Info CSI 00000126 [SR] Verify complete

2015-03-29 10:04:44, Info CSI 00000127 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:44, Info CSI 00000128 [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:48, Info CSI 0000012a [SR] Verify complete

2015-03-29 10:04:48, Info CSI 0000012b [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:48, Info CSI 0000012c [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:52, Info CSI 0000012e [SR] Verify complete

2015-03-29 10:04:52, Info CSI 0000012f [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:52, Info CSI 00000130 [SR] Beginning Verify and Repair transaction

2015-03-29 10:04:58, Info CSI 00000132 [SR] Verify complete

2015-03-29 10:04:58, Info CSI 00000133 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:04:58, Info CSI 00000134 [SR] Beginning Verify and Repair transaction

2015-03-29 10:05:04, Info CSI 0000014c [SR] Verify complete

2015-03-29 10:05:05, Info CSI 0000014d [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:05:05, Info CSI 0000014e [SR] Beginning Verify and Repair transaction

2015-03-29 10:05:09, Info CSI 00000150 [SR] Verify complete

2015-03-29 10:05:09, Info CSI 00000151 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:05:09, Info CSI 00000152 [SR] Beginning Verify and Repair transaction

2015-03-29 10:05:21, Info CSI 00000154 [SR] Verify complete

2015-03-29 10:05:21, Info CSI 00000155 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:05:21, Info CSI 00000156 [SR] Beginning Verify and Repair transaction

2015-03-29 10:05:27, Info CSI 00000159 [SR] Verify complete

2015-03-29 10:05:27, Info CSI 0000015a [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:05:27, Info CSI 0000015b [SR] Beginning Verify and Repair transaction

2015-03-29 10:05:32, Info CSI 0000015d [SR] Verify complete

2015-03-29 10:05:32, Info CSI 0000015e [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:05:32, Info CSI 0000015f [SR] Beginning Verify and Repair transaction

2015-03-29 10:05:36, Info CSI 00000161 [SR] Verify complete

2015-03-29 10:05:36, Info CSI 00000162 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:05:36, Info CSI 00000163 [SR] Beginning Verify and Repair transaction

2015-03-29 10:05:40, Info CSI 00000165 [SR] Verify complete

2015-03-29 10:05:40, Info CSI 00000166 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:05:40, Info CSI 00000167 [SR] Beginning Verify and Repair transaction

2015-03-29 10:05:44, Info CSI 00000169 [SR] Verify complete

2015-03-29 10:05:44, Info CSI 0000016a [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:05:44, Info CSI 0000016b [SR] Beginning Verify and Repair transaction

2015-03-29 10:05:48, Info CSI 0000016f [SR] Verify complete

2015-03-29 10:05:49, Info CSI 00000170 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:05:49, Info CSI 00000171 [SR] Beginning Verify and Repair transaction

2015-03-29 10:05:52, Info CSI 00000173 [SR] Verify complete

2015-03-29 10:05:52, Info CSI 00000174 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:05:52, Info CSI 00000175 [SR] Beginning Verify and Repair transaction

2015-03-29 10:05:59, Info CSI 00000177 [SR] Verify complete

2015-03-29 10:06:00, Info CSI 00000178 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:06:00, Info CSI 00000179 [SR] Beginning Verify and Repair transaction

2015-03-29 10:06:04, Info CSI 0000017c [SR] Verify complete

2015-03-29 10:06:04, Info CSI 0000017d [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:06:04, Info CSI 0000017e [SR] Beginning Verify and Repair transaction

2015-03-29 10:06:08, Info CSI 00000181 [SR] Verify complete

2015-03-29 10:06:08, Info CSI 00000182 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:06:08, Info CSI 00000183 [SR] Beginning Verify and Repair transaction

2015-03-29 10:06:14, Info CSI 00000185 [SR] Verify complete

2015-03-29 10:06:14, Info CSI 00000186 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:06:14, Info CSI 00000187 [SR] Beginning Verify and Repair transaction

2015-03-29 10:06:19, Info CSI 0000018a [SR] Verify complete

2015-03-29 10:06:19, Info CSI 0000018b [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:06:19, Info CSI 0000018c [SR] Beginning Verify and Repair transaction

2015-03-29 10:06:22, Info CSI 0000018e [SR] Verify complete

2015-03-29 10:06:23, Info CSI 0000018f [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:06:23, Info CSI 00000190 [SR] Beginning Verify and Repair transaction

2015-03-29 10:06:27, Info CSI 00000192 [SR] Verify complete

2015-03-29 10:06:27, Info CSI 00000193 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:06:27, Info CSI 00000194 [SR] Beginning Verify and Repair transaction

2015-03-29 10:06:30, Info CSI 00000197 [SR] Verify complete

2015-03-29 10:06:30, Info CSI 00000198 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:06:30, Info CSI 00000199 [SR] Beginning Verify and Repair transaction

2015-03-29 10:06:36, Info CSI 0000019b [SR] Verify complete

2015-03-29 10:06:36, Info CSI 0000019c [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:06:36, Info CSI 0000019d [SR] Beginning Verify and Repair transaction

2015-03-29 10:06:38, Info CSI 0000019f [SR] Verify complete

2015-03-29 10:06:38, Info CSI 000001a0 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:06:38, Info CSI 000001a1 [SR] Beginning Verify and Repair transaction

2015-03-29 10:06:41, Info CSI 000001a3 [SR] Verify complete

2015-03-29 10:06:41, Info CSI 000001a4 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:06:41, Info CSI 000001a5 [SR] Beginning Verify and Repair transaction

2015-03-29 10:06:45, Info CSI 000001a8 [SR] Verify complete

2015-03-29 10:06:45, Info CSI 000001a9 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:06:45, Info CSI 000001aa [SR] Beginning Verify and Repair transaction

2015-03-29 10:06:50, Info CSI 000001ad [SR] Verify complete

2015-03-29 10:06:50, Info CSI 000001ae [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:06:50, Info CSI 000001af [SR] Beginning Verify and Repair transaction

2015-03-29 10:06:54, Info CSI 000001b2 [SR] Verify complete

2015-03-29 10:06:55, Info CSI 000001b3 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:06:55, Info CSI 000001b4 [SR] Beginning Verify and Repair transaction

2015-03-29 10:06:59, Info CSI 000001b6 [SR] Verify complete

2015-03-29 10:07:00, Info CSI 000001b7 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:07:00, Info CSI 000001b8 [SR] Beginning Verify and Repair transaction

2015-03-29 10:07:04, Info CSI 000001bb [SR] Verify complete

2015-03-29 10:07:04, Info CSI 000001bc [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:07:04, Info CSI 000001bd [SR] Beginning Verify and Repair transaction

2015-03-29 10:07:08, Info CSI 000001bf [SR] Verify complete

2015-03-29 10:07:08, Info CSI 000001c0 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:07:08, Info CSI 000001c1 [SR] Beginning Verify and Repair transaction

2015-03-29 10:07:11, Info CSI 000001c3 [SR] Verify complete

2015-03-29 10:07:11, Info CSI 000001c4 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:07:11, Info CSI 000001c5 [SR] Beginning Verify and Repair transaction

2015-03-29 10:07:17, Info CSI 000001c7 [SR] Verify complete

2015-03-29 10:07:17, Info CSI 000001c8 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:07:17, Info CSI 000001c9 [SR] Beginning Verify and Repair transaction

2015-03-29 10:07:24, Info CSI 000001cb [SR] Verify complete

2015-03-29 10:07:25, Info CSI 000001cc [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:07:25, Info CSI 000001cd [SR] Beginning Verify and Repair transaction

2015-03-29 10:07:31, Info CSI 000001cf [SR] Verify complete

2015-03-29 10:07:32, Info CSI 000001d0 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:07:32, Info CSI 000001d1 [SR] Beginning Verify and Repair transaction

2015-03-29 10:07:34, Info CSI 000001d3 [SR] Verify complete

2015-03-29 10:07:34, Info CSI 000001d4 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:07:34, Info CSI 000001d5 [SR] Beginning Verify and Repair transaction

2015-03-29 10:07:38, Info CSI 000001d7 [SR] Verify complete

2015-03-29 10:07:38, Info CSI 000001d8 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:07:38, Info CSI 000001d9 [SR] Beginning Verify and Repair transaction

2015-03-29 10:07:57, Info CSI 000001db [SR] Verify complete

2015-03-29 10:07:57, Info CSI 000001dc [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:07:57, Info CSI 000001dd [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:06, Info CSI 000001df [SR] Verify complete

2015-03-29 10:08:06, Info CSI 000001e0 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:06, Info CSI 000001e1 [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:09, Info CSI 000001e3 [SR] Verify complete

2015-03-29 10:08:10, Info CSI 000001e4 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:10, Info CSI 000001e5 [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:12, Info CSI 000001e7 [SR] Verify complete

2015-03-29 10:08:12, Info CSI 000001e8 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:12, Info CSI 000001e9 [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:15, Info CSI 000001eb [SR] Verify complete

2015-03-29 10:08:15, Info CSI 000001ec [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:15, Info CSI 000001ed [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:18, Info CSI 000001ef [SR] Verify complete

2015-03-29 10:08:18, Info CSI 000001f0 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:18, Info CSI 000001f1 [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:21, Info CSI 000001f3 [SR] Verify complete

2015-03-29 10:08:22, Info CSI 000001f4 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:22, Info CSI 000001f5 [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:22, Info CSI 000001f7 [SR] Verify complete

2015-03-29 10:08:22, Info CSI 000001f8 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:22, Info CSI 000001f9 [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:23, Info CSI 000001fb [SR] Verify complete

2015-03-29 10:08:23, Info CSI 000001fc [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:23, Info CSI 000001fd [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:26, Info CSI 00000205 [SR] Verify complete

2015-03-29 10:08:26, Info CSI 00000206 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:26, Info CSI 00000207 [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:30, Info CSI 00000209 [SR] Verify complete

2015-03-29 10:08:30, Info CSI 0000020a [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:30, Info CSI 0000020b [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:32, Info CSI 0000020d [SR] Verify complete

2015-03-29 10:08:33, Info CSI 0000020e [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:33, Info CSI 0000020f [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:37, Info CSI 00000211 [SR] Verify complete

2015-03-29 10:08:37, Info CSI 00000212 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:37, Info CSI 00000213 [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:41, Info CSI 00000215 [SR] Verify complete

2015-03-29 10:08:41, Info CSI 00000216 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:41, Info CSI 00000217 [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:46, Info CSI 0000021a [SR] Verify complete

2015-03-29 10:08:46, Info CSI 0000021b [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:46, Info CSI 0000021c [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:49, Info CSI 0000021e [SR] Verify complete

2015-03-29 10:08:49, Info CSI 0000021f [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:49, Info CSI 00000220 [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:51, Info CSI 00000222 [SR] Verify complete

2015-03-29 10:08:51, Info CSI 00000223 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:51, Info CSI 00000224 [SR] Beginning Verify and Repair transaction

2015-03-29 10:08:57, Info CSI 00000227 [SR] Verify complete

2015-03-29 10:08:57, Info CSI 00000228 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:08:57, Info CSI 00000229 [SR] Beginning Verify and Repair transaction

2015-03-29 10:09:05, Info CSI 0000022d [SR] Verify complete

2015-03-29 10:09:06, Info CSI 0000022e [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:09:06, Info CSI 0000022f [SR] Beginning Verify and Repair transaction

2015-03-29 10:09:11, Info CSI 00000234 [SR] Verify complete

2015-03-29 10:09:11, Info CSI 00000235 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:09:11, Info CSI 00000236 [SR] Beginning Verify and Repair transaction

2015-03-29 10:09:16, Info CSI 0000023c [SR] Verify complete

2015-03-29 10:09:16, Info CSI 0000023d [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:09:16, Info CSI 0000023e [SR] Beginning Verify and Repair transaction

2015-03-29 10:09:22, Info CSI 00000247 [SR] Verify complete

2015-03-29 10:09:22, Info CSI 00000248 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:09:22, Info CSI 00000249 [SR] Beginning Verify and Repair transaction

2015-03-29 10:09:27, Info CSI 0000024e [SR] Verify complete

2015-03-29 10:09:27, Info CSI 0000024f [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:09:27, Info CSI 00000250 [SR] Beginning Verify and Repair transaction

2015-03-29 10:09:34, Info CSI 00000252 [SR] Verify complete

2015-03-29 10:09:34, Info CSI 00000253 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:09:34, Info CSI 00000254 [SR] Beginning Verify and Repair transaction

2015-03-29 10:09:36, Info CSI 00000258 [SR] Verify complete

2015-03-29 10:09:36, Info CSI 00000259 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:09:36, Info CSI 0000025a [SR] Beginning Verify and Repair transaction

2015-03-29 10:09:40, Info CSI 0000026a [SR] Verify complete

2015-03-29 10:09:40, Info CSI 0000026b [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:09:40, Info CSI 0000026c [SR] Beginning Verify and Repair transaction

2015-03-29 10:09:44, Info CSI 00000283 [SR] Verify complete

2015-03-29 10:09:44, Info CSI 00000284 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:09:44, Info CSI 00000285 [SR] Beginning Verify and Repair transaction

2015-03-29 10:09:49, Info CSI 00000287 [SR] Verify complete

2015-03-29 10:09:49, Info CSI 00000288 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:09:49, Info CSI 00000289 [SR] Beginning Verify and Repair transaction

2015-03-29 10:09:53, Info CSI 0000028b [SR] Verify complete

2015-03-29 10:09:53, Info CSI 0000028c [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:09:53, Info CSI 0000028d [SR] Beginning Verify and Repair transaction

2015-03-29 10:09:56, Info CSI 0000028f [SR] Verify complete

2015-03-29 10:09:56, Info CSI 00000290 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:09:56, Info CSI 00000291 [SR] Beginning Verify and Repair transaction

2015-03-29 10:09:58, Info CSI 0000029f [SR] Verify complete

2015-03-29 10:09:58, Info CSI 000002a0 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:09:58, Info CSI 000002a1 [SR] Beginning Verify and Repair transaction

2015-03-29 10:10:05, Info CSI 000002a3 [SR] Verify complete

2015-03-29 10:10:05, Info CSI 000002a4 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:10:05, Info CSI 000002a5 [SR] Beginning Verify and Repair transaction

2015-03-29 10:10:09, Info CSI 000002b3 [SR] Verify complete

2015-03-29 10:10:10, Info CSI 000002b4 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:10:10, Info CSI 000002b5 [SR] Beginning Verify and Repair transaction

2015-03-29 10:10:12, Info CSI 000002b7 [SR] Verify complete

2015-03-29 10:10:13, Info CSI 000002b8 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:10:13, Info CSI 000002b9 [SR] Beginning Verify and Repair transaction

2015-03-29 10:10:19, Info CSI 000002bc [SR] Verify complete

2015-03-29 10:10:19, Info CSI 000002bd [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:10:19, Info CSI 000002be [SR] Beginning Verify and Repair transaction

2015-03-29 10:10:21, Info CSI 000002c0 [SR] Verify complete

2015-03-29 10:10:22, Info CSI 000002c1 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:10:22, Info CSI 000002c2 [SR] Beginning Verify and Repair transaction

2015-03-29 10:10:23, Info CSI 000002c4 [SR] Verify complete

2015-03-29 10:10:23, Info CSI 000002c5 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:10:23, Info CSI 000002c6 [SR] Beginning Verify and Repair transaction

2015-03-29 10:10:26, Info CSI 000002c8 [SR] Verify complete

2015-03-29 10:10:26, Info CSI 000002c9 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:10:26, Info CSI 000002ca [SR] Beginning Verify and Repair transaction

2015-03-29 10:10:29, Info CSI 000002cc [SR] Verify complete

2015-03-29 10:10:29, Info CSI 000002cd [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:10:29, Info CSI 000002ce [SR] Beginning Verify and Repair transaction

2015-03-29 10:10:35, Info CSI 000002e6 [SR] Verify complete

2015-03-29 10:10:35, Info CSI 000002e7 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:10:35, Info CSI 000002e8 [SR] Beginning Verify and Repair transaction

2015-03-29 10:10:39, Info CSI 000002ec [SR] Verify complete

2015-03-29 10:10:39, Info CSI 000002ed [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:10:39, Info CSI 000002ee [SR] Beginning Verify and Repair transaction

2015-03-29 10:10:48, Info CSI 000002f0 [SR] Verify complete

2015-03-29 10:10:48, Info CSI 000002f1 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:10:48, Info CSI 000002f2 [SR] Beginning Verify and Repair transaction

2015-03-29 10:10:51, Info CSI 000002f4 [SR] Verify complete

2015-03-29 10:10:51, Info CSI 000002f5 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:10:51, Info CSI 000002f6 [SR] Beginning Verify and Repair transaction

2015-03-29 10:10:54, Info CSI 000002f9 [SR] Verify complete

2015-03-29 10:10:54, Info CSI 000002fa [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:10:54, Info CSI 000002fb [SR] Beginning Verify and Repair transaction

2015-03-29 10:10:57, Info CSI 000002fe [SR] Verify complete

2015-03-29 10:10:57, Info CSI 000002ff [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:10:57, Info CSI 00000300 [SR] Beginning Verify and Repair transaction

2015-03-29 10:11:00, Info CSI 00000302 [SR] Verify complete

2015-03-29 10:11:00, Info CSI 00000303 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:11:00, Info CSI 00000304 [SR] Beginning Verify and Repair transaction

2015-03-29 10:11:03, Info CSI 00000306 [SR] Verify complete

2015-03-29 10:11:04, Info CSI 00000307 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:11:04, Info CSI 00000308 [SR] Beginning Verify and Repair transaction

2015-03-29 10:11:07, Info CSI 0000030b [SR] Verify complete

2015-03-29 10:11:07, Info CSI 0000030c [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:11:07, Info CSI 0000030d [SR] Beginning Verify and Repair transaction

2015-03-29 10:11:10, Info CSI 0000030f [SR] Verify complete

2015-03-29 10:11:10, Info CSI 00000310 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:11:10, Info CSI 00000311 [SR] Beginning Verify and Repair transaction

2015-03-29 10:11:13, Info CSI 00000313 [SR] Verify complete

2015-03-29 10:11:14, Info CSI 00000314 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:11:14, Info CSI 00000315 [SR] Beginning Verify and Repair transaction

2015-03-29 10:11:18, Info CSI 00000317 [SR] Verify complete

2015-03-29 10:11:18, Info CSI 00000318 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:11:18, Info CSI 00000319 [SR] Beginning Verify and Repair transaction

2015-03-29 10:11:21, Info CSI 0000031c [SR] Verify complete

2015-03-29 10:11:21, Info CSI 0000031d [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:11:21, Info CSI 0000031e [SR] Beginning Verify and Repair transaction

2015-03-29 10:11:29, Info CSI 00000320 [SR] Verify complete

2015-03-29 10:11:29, Info CSI 00000321 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:11:29, Info CSI 00000322 [SR] Beginning Verify and Repair transaction

2015-03-29 10:11:35, Info CSI 00000324 [SR] Verify complete

2015-03-29 10:11:35, Info CSI 00000325 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:11:35, Info CSI 00000326 [SR] Beginning Verify and Repair transaction

2015-03-29 10:11:40, Info CSI 00000328 [SR] Verify complete

2015-03-29 10:11:41, Info CSI 00000329 [SR] Verifying 100 (0x0000000000000064) components

2015-03-29 10:11:41, Info CSI 0000032a [SR] Beginning Verify and Repair transaction

2015-03-29 10:11:45, Info CSI 0000032c [SR] Verify complete

2015-03-29 10:11:45, Info CSI 0000032d [SR] Verifying 72 (0x0000000000000048) components

2015-03-29 10:11:45, Info CSI 0000032e [SR] Beginning Verify and Repair transaction

2015-03-29 10:11:47, Info CSI 00000330 [SR] Verify complete

2015-03-29 10:11:47, Info CSI 00000331 [SR] Repairing 0 components

2015-03-29 10:11:47, Info CSI 00000332 [SR] Beginning Verify and Repair transaction

2015-03-29 10:11:47, Info CSI 00000334 [SR] Repair complete

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Infected Computer

✨ Ask AI

Ask AI