Spyware / Malware / Virus Removal

Everything is super slow until I stop Nvtray.exe [Solved]

3 min read

Looking for the outcome? Ask AI

Hoffmanns Topic Starter

Post #1September 9, 2015, 7:24 PM UTC

let's start by saying I'm not super tech savvy when it comes to this stuff.

I think my computer has the clap.

Runs super slow. ESST Smart security hasn't picked up anything worth talking about as the problem still persists.

After looking at the running processes nvtray.exe can take up a majority of my memory. After ending that process the computer seems to run better.

Then today I had someone log into my email server from another city, Yes I changed my password from a different computer

Please help

Thanks

Sean

Run date: 2015-09-08 08:25:10

—————————–

08:25:10.720 OS Version: Windows x64 6.1.7601 Service Pack 1

08:25:10.720 Number of processors: 4 586 0x3A09

08:25:10.720 ComputerName: MAIN UserName: User

08:25:13.172 Initialize success

08:25:13.220 VM: initialized successfully

08:25:13.236 VM: Intel CPU supported

08:25:18.553 VM: supported disk I/O iaStor.sys

08:28:10.773 AVAST engine defs: 15090800

08:28:20.481 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1

08:28:20.497 Disk 0 Vendor: TOSHIBA_ MX4O Size: 1907729MB BusType: 8

08:28:20.583 VM: Disk 0 MBR read successfully

08:28:20.583 Disk 0 MBR scan

08:28:20.614 Disk 0 Windows 7 default MBR code

08:28:20.629 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 3528 MB offset 2048

08:28:20.629 Disk 0 default boot code

08:28:20.645 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 1904199 MB offset 7227392

08:28:20.676 Disk 0 scanning C:\Windows\system32\drivers

08:28:30.521 Service scanning

08:28:55.831 Modules scanning

08:28:55.831 Disk 0 trace - called modules:

08:28:55.847 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys iaStor.sys hal.dll

08:28:55.847 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8009aa7060]

08:28:55.862 3 CLASSPNP.SYS[fffff880015bb43f] -> nt!IofCallDriver -> [0xfffffa80071f86c0]

08:28:55.894 5 ACPI.sys[fffff88000f857a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8007538050]

08:28:58.114 AVAST engine scan C:\Windows

08:29:02.502 AVAST engine scan C:\Windows\system32

08:33:53.458 AVAST engine scan C:\Windows\system32\drivers

08:34:53.159 AVAST engine scan C:\Users\User

08:58:08.709 AVAST engine scan C:\ProgramData

09:07:32.454 Disk 0 statistics 5498142/0/18 @ 1.30 MB/s

09:07:32.469 Scan finished successfully

09:27:49.677 Disk 0 MBR has been saved successfully to "C:\Users\User\Desktop\MBR.dat"

09:27:49.692 The log file has been saved successfully to "C:\Users\User\Desktop\aswMBR.txt"

Run date: 2015-09-09 12:15:46

—————————–

12:15:46.350 OS Version: Windows x64 6.1.7601 Service Pack 1

12:15:46.350 Number of processors: 4 586 0x3A09

12:15:46.350 ComputerName: MAIN UserName: User

12:15:48.914 Initialize success

12:15:48.951 VM: initialized successfully

12:15:48.951 VM: Intel CPU supported

12:15:55.050 VM: supported disk I/O iaStor.sys

12:16:18.801 AVAST engine defs: 15090800

12:16:20.791 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1

12:16:20.791 Disk 0 Vendor: TOSHIBA_ MX4O Size: 1907729MB BusType: 8

12:16:20.881 VM: Disk 0 MBR read successfully

12:16:20.881 Disk 0 MBR scan

12:16:20.896 Disk 0 Windows 7 default MBR code

12:16:20.896 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 3528 MB offset 2048

12:16:20.896 Disk 0 default boot code

12:16:20.921 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 1904199 MB offset 7227392

12:16:20.936 Disk 0 scanning C:\Windows\system32\drivers

12:16:30.497 Service scanning

12:16:48.779 Modules scanning

12:16:48.984 Disk 0 trace - called modules:

12:16:48.994 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys iaStor.sys hal.dll

12:16:48.999 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800784b060]

12:16:48.999 3 CLASSPNP.SYS[fffff88000c5d43f] -> nt!IofCallDriver -> [0xfffffa80071a0e40]

12:16:49.004 5 ACPI.sys[fffff88000f007a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa80071a3050]

12:16:51.625 AVAST engine scan C:\Windows

12:16:58.042 AVAST engine scan C:\Windows\system32

12:22:37.905 AVAST engine scan C:\Windows\system32\drivers

12:23:46.566 AVAST engine scan C:\Users\User

12:37:45.546 AVAST engine scan C:\ProgramData

12:40:47.607 Disk 0 statistics 5910350/0/18 @ 2.35 MB/s

12:40:47.639 Scan finished successfully

13:18:38.668 Disk 0 MBR has been saved successfully to "C:\Users\User\Desktop\MBR.dat"

13:18:38.693 The log file has been saved successfully to "C:\Users\User\Desktop\aswMBR.txt"

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-09-2015 01

Ran by [removed] (administrator) on MAIN (09-09-2015 14:04:08)

Running from C:\Users\[removed]\Desktop

[removed]

Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe

(Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe

(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\ramaint.exe

(Mitchell Repair Information Company, LLC) C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.BCS.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.SHOPSTREAM\MSSQL\Binn\sqlservr.exe

(RDM Corporation) C:\Windows\SysWOW64\RDMSOService.exe

() C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

() C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\XCSecurityService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe

(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe

(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe

(The Scan Group, Inc.) C:\TSG\priscan\schtasks.exe

(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe

(brother) C:\Program Files (x86)\Brownie\BrStsW64.exe

() C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\XChrgSrv.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(brother) C:\Program Files (x86)\Brownie\brpjp04a.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

() C:\Program Files (x86)\RSMarketingTools\service.exe

() C:\Program Files (x86)\RSMarketingTools\updater\updater.exe

(Mitchell Repair Information Company, LLC.) C:\Program Files (x86)\M1-SK\Teamworks\ShopStreamXtShell.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE

(NETGEAR Inc.) C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe

() C:\Program Files (x86)\NETGEAR Genie\bin\genie2_tray.exe

(Igor Pavlov) C:\Program Files\7-Zip\7zFM.exe

(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe

(Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe

(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe

() C:\speedDIAL\speedDIAL.exe

(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)

HKLM\…\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)

HKLM\…\Run: [IntelliPoint] => c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation)

HKLM\…\Run: [LogMeIn GUI] => C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe [57928 2013-04-30] (LogMeIn, Inc.)

HKLM\…\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5595848 2015-01-28] (ESET)

HKLM\…\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1806136 2015-08-11] (NVIDIA Corporation)

HKLM-x32\…\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284480 2012-05-30] (Intel Corporation)

HKLM-x32\…\Run: [BrStsWnd] => C:\Program Files (x86)\Brownie\BrstsW64.exe [3697776 2012-06-21] (brother)

HKLM-x32\…\Run: [Mitchell 1 DataProtection Backup Monitor] => C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.BMA.exe [705480 2013-02-14] (Mitchell Repair Information Company, LLC)

HKLM-x32\…\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-31] (Apple Inc.)

HKLM-x32\…\Run: [CAMMonitor] => C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\XChrgSrv.exe [14758400 2013-05-15] ()

HKLM-x32\…\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)

HKLM-x32\…\Run: [] => [X]

HKLM-x32\…\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-09-01] (Apple Inc.)

HKLM-x32\…\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-17798994-207464888-438797339-1000\…\Run: [Google Update] => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc.)

HKU\S-1-5-21-17798994-207464888-438797339-1000\…\Run: [HP Officejet Pro 8600 (NET)] => C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)

HKU\S-1-5-21-17798994-207464888-438797339-1000\…\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [1371456 2015-04-27] (Lavasoft)

HKU\S-1-5-21-17798994-207464888-438797339-1000\…\Run: [Dropbox Update] => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.)

HKU\S-1-5-21-17798994-207464888-438797339-1000\…\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)

HKU\S-1-5-21-17798994-207464888-438797339-1000\…\Run: [NETGEARGenie] => C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe [602880 2015-06-01] (NETGEAR Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Schtasks.lnk [2013-02-20]

ShortcutTarget: Schtasks.lnk -> C:\TSG\priscan\schtasks.exe (The Scan Group, Inc.)

Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-12-02]

ShortcutTarget: Dropbox.lnk -> C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

GroupPolicyUsers\S-1-5-21-17798994-207464888-438797339-1012\User: Restriction detected <======= ATTENTION

GroupPolicyUsers\S-1-5-21-17798994-207464888-438797339-1011\User: Restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog9-x64 01 C:\Windows\system32\LavasoftTcpService64.dll [373864 2015-05-04] (Lavasoft Limited)

Winsock: Catalog9-x64 02 C:\Windows\system32\LavasoftTcpService64.dll [373864 2015-05-04] (Lavasoft Limited)

Winsock: Catalog9-x64 03 C:\Windows\system32\LavasoftTcpService64.dll [373864 2015-05-04] (Lavasoft Limited)

Winsock: Catalog9-x64 04 C:\Windows\system32\LavasoftTcpService64.dll [373864 2015-05-04] (Lavasoft Limited)

Winsock: Catalog9-x64 15 C:\Windows\system32\LavasoftTcpService64.dll [373864 2015-05-04] (Lavasoft Limited)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{A68425E0-96FC-4FC4-AD7D-5A802E62D5D2}: [NameServer] 192.168.1.1

Tcpip\..\Interfaces\{FE47BECA-D4A4-48C8-98EA-D2B9968072A5}: [DhcpNameServer] 192.168.1.1

Internet Explorer:

==================

HKU\S-1-5-21-17798994-207464888-438797339-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-17798994-207464888-438797339-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp

HKU\S-1-5-21-17798994-207464888-438797339-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www2.prodemand.com/Main/Index#|||||||||||||mi/Home

SearchScopes: HKLM -> DefaultScope {E4321241-A424-4A37-96D6-649FB8F3D860} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=MNMTDF&pc;=MANM&src;=IE-SearchBox

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM -> {E4321241-A424-4A37-96D6-649FB8F3D860} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=MNMTDF&pc;=MANM&src;=IE-SearchBox

SearchScopes: HKU\S-1-5-21-17798994-207464888-438797339-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}

SearchScopes: HKU\S-1-5-21-17798994-207464888-438797339-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}

SearchScopes: HKU\S-1-5-21-17798994-207464888-438797339-1000 -> {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = hxxp://securedsearch.lavasoft.com/results.php?pr=vmn&id;=webcompa&ent;=ch_WCYID10140_cnet_150504&q;={searchTerms}

SearchScopes: HKU\S-1-5-21-17798994-207464888-438797339-1000 -> {E4321241-A424-4A37-96D6-649FB8F3D860} URL =

BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-02-12] (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-02-12] (Oracle Corporation)

BHO-x32: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-09-26] (Oracle Corporation)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-09-26] (Oracle Corporation)

Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)

Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)

DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} hxxps://akamaicdn.webex.com/client/WBXclient-T28L10NSP12EP6-17378/webex/ieatgpc1.cab

DPF: HKLM-x32 {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} hxxps://secure.logmein.com//activex/ractrl.cab?lmi=1007

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-13] ()

FF Plugin: @java.com/DTPlugin,version=10.13.2 -> C:\Windows\system32\npDeployJava1.dll [2013-02-12] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.13.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-02-12] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-13] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll [2013-01-30] (Adobe Systems, Inc.)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-05-06] ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2012-12-13] (Google)

FF Plugin-x32: @IPCWebComponents -> C:\Program Files (x86)\IPCWebComponents\npIPCReg.dll [2014-04-07] ()

FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-09-26] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-09-26] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-06] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-06] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-29] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-29] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-17798994-207464888-438797339-1000: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-28] (Google Inc.)

FF Plugin HKU\S-1-5-21-17798994-207464888-438797339-1000: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-28] (Google Inc.)

FF HKLM-x32\…\Thunderbird\Extensions: [[removed]] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome:

=======

CHR HomePage: Default -> hxxp://alldatapro.com/alldata/PRO~OF1~C8000~N/0

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs;_ri={google:suggestRid}&xssi;=t&q;={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Chrome) - C:\Users\User\AppData\Local\Google\Chrome\Application\45.0.2454.85\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\User\AppData\Local\Google\Chrome\Application\45.0.2454.85\ppGoogleNaClPluginChrome.dll No File

CHR Plugin: (Chrome PDF Viewer) - C:\Users\User\AppData\Local\Google\Chrome\Application\45.0.2454.85\pdf.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Java(TM) Platform SE 7 U13) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Google Update) - C:\Users\User\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File

CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_168.dll No File

CHR Plugin: (Java Deployment Toolkit 7.0.130.20) - C:\Windows\SysWOW64\npDeployJava1.dll No File

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File

CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-02-13]

CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-02-13]

CHR Extension: (SPOI Options (Please remove me)) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdokagampppgbnjfdlkfpphniapiiifn [2013-02-14]

CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-02-13]

CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-02-13]

CHR Extension: (Lock) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\diomobcomdlfikbkhbjhdabghenhedoh [2015-08-03]

CHR Extension: (Chrome Remote Desktop) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2014-01-23]

CHR Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-04]

CHR Extension: (Enable right click) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhojmcideegachlhfgfdhailpfhgknjm [2014-07-31]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12]

CHR Extension: (Google Mail Checker) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2013-02-14]

CHR Extension: (Chrome Web Store Payments) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]

CHR Extension: (AT_DJTiesto) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\okmcbgkkeagngnijeiighgblfljbekip [2013-02-14]

CHR Extension: (LogMeIn) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\omkjapkpkiciphacnalicgmmcelfolon [2013-08-06]

CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-02-13]

CHR Extension: (Tapatalk Notifier) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\plfhcjljnfjpfcbjpgnflfofmahljkjj [2013-02-14]

CHR Extension: (IPCAM) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pokfbnepnoglgojcldfhjeplnmjkckha [2014-07-21]

CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-08-03]

CHR Extension: (Chrome Web Store Payments) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-03]

StartMenuInternet: Google Chrome.QZQJQM65FRP6H5TY6AXPLBO5U4 - C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe

Opera:

=======

OPR Extension: (IPCAM) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\pokfbnepnoglgojcldfhjeplnmjkckha [2014-07-21]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1349576 2015-01-28] (ESET)

S3 FileSystemMonitorService; C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\FileSystemMonitorService.exe [62464 2015-04-01] (Snap-on) [File not signed]

R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [417640 2015-08-22] (LogMeIn, Inc.)

R2 LMIMaint; C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe [508264 2015-08-22] (LogMeIn, Inc.)

R2 LogMeIn; C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe [407424 2013-04-30] (LogMeIn, Inc.)

S2 Mitchell1DataProtectionABS; C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.ABS.exe [43464 2013-02-14] (Mitchell Repair Information Company, LLC)

R2 Mitchell1DataProtectionBCS; C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.BCS.exe [78792 2013-02-14] (Mitchell Repair Information Company, LLC)

R2 MSSQL$SHOPSTREAM; c:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.SHOPSTREAM\MSSQL\Binn\sqlservr.exe [43128496 2014-07-10] (Microsoft Corporation)

S3 NETGEARGenieDaemon; C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe [232192 2015-06-01] (NETGEAR)

R2 RDMSOService; C:\Windows\SysWOW64\RDMSOService.exe [128448 2010-10-01] (RDM Corporation)

R2 RSMarketingTools; C:\Program Files (x86)\RSMarketingTools\service.exe [61440 2014-05-19] () [File not signed]

R2 RSMarketingToolsUpdater; C:\Program Files (x86)\RSMarketingTools\updater\updater.exe [61440 2014-06-23] () [File not signed]

R2 SearchProtectionService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [17768 2015-04-27] ()

S4 SQLAgent$SHOPSTREAM; c:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.SHOPSTREAM\MSSQL\Binn\SQLAGENT.EXE [381104 2014-07-10] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

R2 XCSecurity; C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\XCSecurityService.exe [2073088 2013-05-15] () [File not signed]

S3 XCService; C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\XCService.exe [461824 2013-05-15] () [File not signed]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 BrPar; C:\Windows\System32\drivers\BrPar64a.sys [30528 2006-11-06] (Brother Industries Ltd.)

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [246000 2015-01-30] (ESET)

S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [241880 2015-01-30] (ESET)

R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [169792 2015-01-30] (ESET)

R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [222280 2015-01-30] (ESET)

R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44632 2015-01-30] (ESET)

R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [64208 2015-01-30] (ESET)

R2 LMIInfo; C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [16056 2013-04-30] (LogMeIn, Inc.)

S4 LMIRfsClientNP; no ImagePath

R2 NPF; C:\Windows\system32\drivers\npf.sys [35344 2015-09-09] (CACE Technologies, Inc.)

S3 sscdserd; C:\Windows\System32\DRIVERS\sscdserd.sys [141384 2010-11-11] (MCCI Corporation)

S3 avchv; system32\DRIVERS\avchv.sys [X]

U3 aswMBR; \??\C:\Users\User\AppData\Local\Temp\aswMBR.sys [X]

U3 aswVmm; \??\C:\Users\User\AppData\Local\Temp\aswVmm.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-09 14:04 - 2015-09-09 14:04 - 00033622 _____ C:\Users\User\Desktop\FRST.txt

2015-09-09 14:04 - 2015-09-09 14:04 - 00000000 ____D C:\FRST

2015-09-09 12:12 - 2015-09-09 12:12 - 02190336 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe

2015-09-09 09:41 - 2015-09-09 09:41 - 01147024 _____ ( ) C:\Users\User\Desktop\IPCWebComponents.exe

2015-09-09 09:34 - 2015-09-09 09:34 - 01467751 _____ C:\Users\User\Desktop\SearchTool_Win_v1.0.0.5.zip

2015-09-08 11:31 - 2015-09-08 11:31 - 00000000 ____D C:\Users\User\AppData\Local\NVIDIA

2015-09-08 10:55 - 2015-09-08 11:33 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype

2015-09-08 10:55 - 2015-09-08 10:55 - 00000000 ___RD C:\Program Files (x86)\Skype

2015-09-08 10:55 - 2015-09-08 10:55 - 00000000 ____D C:\Users\User\AppData\Local\Skype

2015-09-08 10:55 - 2015-09-08 10:55 - 00000000 ____D C:\ProgramData\Skype

2015-09-08 10:55 - 2015-09-08 10:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2015-09-08 10:53 - 2013-10-01 21:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2015-09-08 10:53 - 2013-10-01 21:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2015-09-08 10:53 - 2013-10-01 21:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2015-09-08 10:53 - 2013-10-01 20:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2015-09-08 10:53 - 2013-10-01 20:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2015-09-08 10:53 - 2013-10-01 20:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2015-09-08 10:53 - 2013-10-01 20:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2015-09-08 10:53 - 2013-10-01 19:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2015-09-08 10:53 - 2013-10-01 19:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll

2015-09-08 10:53 - 2013-10-01 19:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll

2015-09-08 10:53 - 2013-10-01 19:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2015-09-08 10:53 - 2013-10-01 19:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2015-09-08 10:53 - 2013-10-01 18:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2015-09-08 10:53 - 2013-10-01 18:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2015-09-08 10:53 - 2013-10-01 18:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2015-09-08 10:53 - 2013-10-01 17:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2015-09-08 10:53 - 2013-10-01 15:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2015-09-08 10:53 - 2013-10-01 15:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2015-09-08 10:45 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE

2015-09-08 10:37 - 2015-09-08 10:37 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-09-08 10:37 - 2015-09-08 10:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-09-08 10:37 - 2015-09-08 10:37 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-09-08 10:37 - 2015-09-08 10:37 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-09-08 10:37 - 2015-09-08 10:37 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2015-09-08 10:37 - 2015-09-08 10:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2015-09-08 10:37 - 2015-09-08 10:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-09-08 10:37 - 2015-09-08 10:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-09-08 10:37 - 2015-09-08 10:37 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2015-09-08 10:37 - 2015-09-08 10:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2015-09-08 10:37 - 2015-09-08 10:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2015-09-08 10:37 - 2015-09-08 10:37 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2015-09-08 10:37 - 2015-09-08 10:37 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-09-08 10:29 - 2015-09-08 10:45 - 00016189 _____ C:\Windows\IE11_main.log

2015-09-08 10:29 - 2015-09-08 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2015-09-08 10:28 - 2015-08-06 19:04 - 00572024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2015-09-08 09:27 - 2015-09-09 13:18 - 00004288 _____ C:\Users\User\Desktop\aswMBR.txt

2015-09-08 09:27 - 2015-09-09 13:18 - 00000512 _____ C:\Users\User\Desktop\MBR.dat

2015-09-08 08:24 - 2015-09-08 08:24 - 05198336 _____ (AVAST Software) C:\Users\User\Desktop\aswMBR.exe

2015-09-08 05:22 - 2015-09-08 05:22 - 00000000 ____D C:\Users\WORK\AppData\Roaming\ESET

2015-09-08 05:22 - 2015-09-08 05:22 - 00000000 ____D C:\Users\WORK\AppData\Local\ESET

2015-09-03 23:10 - 2015-09-03 23:10 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2015-09-01 08:04 - 2015-09-09 07:08 - 00064512 _____ C:\Users\User\Documents\coupon sheet 0915.xls

2015-08-28 11:09 - 2015-06-17 14:53 - 03079168 _____ C:\Users\User\Desktop\SearchTool.exe

2015-08-25 09:15 - 2015-08-26 05:13 - 00034816 _____ C:\Users\User\Downloads\September-2015-Calendar.xls

2015-08-17 11:50 - 2015-08-17 11:50 - 00000000 ____D C:\Users\User\AppData\Local\{587939FE-EA60-4B6A-8663-E884E933ACF3}

2015-08-13 09:33 - 2015-09-09 13:41 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-08-13 09:33 - 2015-08-13 09:37 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-08-13 09:33 - 2015-08-13 09:37 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-08-13 09:33 - 2015-08-13 09:37 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-08-12 01:30 - 2015-07-20 13:12 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-08-12 01:30 - 2015-07-20 13:12 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-08-12 01:30 - 2015-07-20 13:12 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-08-12 01:30 - 2015-07-20 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-08-12 01:30 - 2015-07-20 13:12 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-08-12 01:30 - 2015-07-20 13:12 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-08-12 01:30 - 2015-07-20 13:12 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-08-12 01:30 - 2015-07-20 13:12 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-08-12 01:30 - 2015-07-20 13:12 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-08-12 01:30 - 2015-07-20 13:12 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-08-12 01:30 - 2015-07-20 13:12 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-08-12 01:30 - 2015-07-20 12:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-08-12 01:30 - 2015-07-20 12:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-08-12 01:30 - 2015-07-20 12:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-08-12 01:30 - 2015-07-20 12:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-08-12 01:30 - 2015-07-20 12:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-08-12 01:30 - 2015-07-10 12:51 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-08-12 01:30 - 2015-07-10 12:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-08-11 12:14 - 2015-08-11 12:15 - 00000000 ____D C:\Users\User\AppData\Local\{34537597-D376-4C98-9B54-562794A8E3F0}

2015-08-11 12:13 - 2015-08-11 12:14 - 00000000 ____D C:\Users\User\AppData\Local\{4C8F2CC4-86F1-4C7E-99F6-B3BF8DF6F499}

2015-08-11 01:08 - 2015-08-11 01:08 - 42740536 _____ C:\Windows\system32\nvcompiler.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 37757584 _____ C:\Windows\SysWOW64\nvcompiler.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 30497920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 22960768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 16160424 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 15902640 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 14512608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 13277448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 11845224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 11063440 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2015-08-11 01:08 - 2015-08-11 01:08 - 03019128 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 02942280 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 02609480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 01906832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435382.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 01577808 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 01568056 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435382.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 01071416 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 01063040 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 00991888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 00985232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 00948832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 00213360 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys

2015-08-11 01:08 - 2015-08-11 01:08 - 00185632 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 00164192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 00160896 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 00137424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2015-08-11 01:08 - 2015-08-11 01:08 - 00048992 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-09 14:03 - 2015-01-25 20:57 - 770527908 _____ C:\Windows\SysWOW64\server.log

2015-09-09 13:56 - 2013-02-12 13:58 - 00000904 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-17798994-207464888-438797339-1000UA.job

2015-09-09 13:54 - 2013-02-19 09:05 - 00000000 ____D C:\speedDIAL

2015-09-09 13:47 - 2013-04-03 13:58 - 00000494 _____ C:\Windows\Tasks\DataAcquisition.job

2015-09-09 13:41 - 2015-06-18 00:30 - 00000914 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-17798994-207464888-438797339-1000UA.job

2015-09-09 13:38 - 2013-02-18 11:31 - 00000000 ____D C:\ProgramData\LogMeIn

2015-09-09 13:26 - 2014-01-23 15:22 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-09-09 12:34 - 2009-10-02 23:11 - 02095726 _____ C:\Windows\WindowsUpdate.log

2015-09-09 12:31 - 2009-07-13 23:45 - 00027568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-09-09 12:31 - 2009-07-13 23:45 - 00027568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-09-09 09:02 - 2014-09-17 18:12 - 00000368 _____ C:\Windows\Tasks\Demandforce DFLink Upload.job

2015-09-09 08:30 - 2014-09-17 18:12 - 00000358 _____ C:\Windows\Tasks\Demandforce DFLink Update.job

2015-09-09 07:27 - 2014-01-13 11:08 - 00000000 ____D C:\Users\User\AppData\Local\NETGEARGenie

2015-09-09 07:26 - 2014-01-13 11:08 - 00369168 _____ (CACE Technologies, Inc.) C:\Windows\system32\wpcap.dll

2015-09-09 07:26 - 2014-01-13 11:08 - 00281104 _____ (CACE Technologies, Inc.) C:\Windows\SysWOW64\wpcap.dll

2015-09-09 07:26 - 2014-01-13 11:08 - 00106000 _____ (CACE Technologies, Inc.) C:\Windows\system32\packet.dll

2015-09-09 07:26 - 2014-01-13 11:08 - 00096784 _____ (CACE Technologies, Inc.) C:\Windows\SysWOW64\packet.dll

2015-09-09 07:26 - 2014-01-13 11:08 - 00035344 _____ (CACE Technologies, Inc.) C:\Windows\system32\Drivers\npf.sys

2015-09-09 07:26 - 2014-01-13 11:08 - 00002094 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR Genie.lnk

2015-09-09 07:26 - 2014-01-13 11:08 - 00000000 ____D C:\Program Files (x86)\NETGEAR Genie

2015-09-09 07:13 - 2013-10-01 07:32 - 00086528 _____ C:\Users\User\Documents\GAS.xls

2015-09-09 07:09 - 2013-10-01 07:43 - 00065536 _____ C:\Users\User\Documents\Month.xls

2015-09-09 05:11 - 2013-02-12 13:54 - 00083968 _____ C:\Users\User\Documents\GLCode.xls

2015-09-09 04:41 - 2015-06-18 00:30 - 00000862 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-17798994-207464888-438797339-1000Core.job

2015-09-09 04:26 - 2014-01-23 15:22 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-09-09 03:36 - 2014-04-24 07:49 - 00000494 _____ C:\Windows\Tasks\DataAcquisitionMUDLICK.job

2015-09-09 02:07 - 2015-01-25 20:57 - 06669391 _____ C:\Windows\SysWOW64\updater.log

2015-09-09 00:00 - 2015-01-25 20:57 - 00000000 ____D C:\Program Files (x86)\RSMarketingTools

2015-09-08 23:56 - 2013-02-12 13:58 - 00000852 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-17798994-207464888-438797339-1000Core.job

2015-09-08 16:05 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\rescache

2015-09-08 14:58 - 2013-02-21 10:54 - 00000494 _____ C:\Users\User\Desktop\Kern, DeWenter, Viere - Login.website

2015-09-08 11:48 - 2013-06-07 10:01 - 00000796 __RSH C:\Users\User\ntuser.pol

2015-09-08 11:31 - 2014-12-02 12:50 - 00000000 ___RD C:\Users\User\Dropbox

2015-09-08 11:31 - 2014-12-02 12:46 - 00000000 ____D C:\Users\User\AppData\Roaming\Dropbox

2015-09-08 11:31 - 2013-02-25 10:26 - 00000351 _____ C:\Windows\Brownie.ini

2015-09-08 11:30 - 2013-02-12 12:11 - 00001445 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-09-08 11:30 - 2012-09-24 13:21 - 00000000 ____D C:\ProgramData\NVIDIA

2015-09-08 11:30 - 2009-07-13 23:51 - 00074600 _____ C:\Windows\setupact.log

2015-09-08 11:30 - 2009-07-13 22:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

2015-09-08 11:28 - 2009-07-14 00:13 - 00876082 _____ C:\Windows\system32\PerfStringBackup.INI

2015-09-08 11:24 - 2014-01-24 19:27 - 00001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Client.lnk

2015-09-08 11:24 - 2014-01-24 19:27 - 00001024 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Control Panel.lnk

2015-09-08 11:23 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-09-08 11:21 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2015-09-08 10:29 - 2012-09-24 13:21 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2015-09-08 10:29 - 2012-09-24 13:21 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2015-09-08 10:29 - 2012-09-24 13:20 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2015-09-08 10:24 - 2013-06-05 03:00 - 00016217 _____ C:\Windows\IE10_main.log

2015-09-08 08:29 - 2013-02-12 13:54 - 00053760 _____ C:\Users\User\Documents\Lottery holiday.xls

2015-09-08 08:11 - 2013-02-13 15:46 - 00000000 ____D C:\ProgramData\Microsoft Help

2015-09-08 08:09 - 2013-08-02 03:00 - 00000000 ____D C:\Windows\system32\MRT

2015-09-08 05:31 - 2013-06-10 09:46 - 00000000 ____D C:\Users\AAx-DPR-SrvAcct

2015-09-08 05:30 - 2010-11-20 22:47 - 00104268 _____ C:\Windows\PFRO.log

2015-09-07 16:00 - 2013-12-19 15:30 - 00000000 ____D C:\custlink

2015-09-05 08:22 - 2015-01-23 10:29 - 00000000 ____D C:\Users\User\Desktop\ah

2015-09-05 07:35 - 2013-02-18 11:29 - 00000250 _____ C:\Windows\SASUI.ini

2015-09-03 14:56 - 2013-02-12 13:54 - 00000000 ____D C:\Users\User\Documents\Inventory

2015-09-01 07:16 - 2013-02-12 13:54 - 00000000 ____D C:\Users\User\Documents\Month Totals

2015-09-01 07:12 - 2013-02-12 13:54 - 00000000 ____D C:\Users\User\Documents\Gas Totals

2015-09-01 07:09 - 2015-08-01 07:27 - 00066048 _____ C:\Users\User\Documents\coupon sheet 0815.xls

2015-08-31 11:51 - 2015-05-04 13:16 - 00000301 _____ C:\prefs.js

2015-08-31 11:51 - 2015-05-04 13:16 - 00000000 ____D C:\searchplugins

2015-08-29 04:21 - 2014-01-23 15:22 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-08-29 04:21 - 2014-01-23 15:22 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-08-28 23:51 - 2013-02-12 13:58 - 00003876 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-17798994-207464888-438797339-1000UA

2015-08-28 23:51 - 2013-02-12 13:58 - 00003480 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-17798994-207464888-438797339-1000Core

2015-08-28 07:22 - 2013-02-20 14:16 - 00000000 ____D C:\EDI

2015-08-27 08:56 - 2015-05-13 14:20 - 00000000 ____D C:\Program Files (x86)\6.5 DB Utility

2015-08-26 23:03 - 2013-04-22 08:28 - 00000642 _____ C:\Users\User\Desktop\Twin Cities Gas Prices - Find Cheap Gas Prices in Minnesota.website

2015-08-25 09:14 - 2015-07-27 08:42 - 00035840 _____ C:\Users\User\Downloads\August-2015-Calendar.xls

2015-08-25 05:03 - 2014-01-08 09:47 - 00000000 ____D C:\Users\User\Desktop\New folder

2015-08-24 23:16 - 2013-02-23 11:18 - 00000000 ____D C:\Users\User\AppData\Roaming\HpUpdate

2015-08-22 04:59 - 2013-07-03 15:15 - 00000000 ____D C:\Program Files (x86)\LogMeIn

2015-08-22 04:58 - 2013-07-03 15:15 - 00122752 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIRfsClientNP.dll

2015-08-22 04:58 - 2013-07-03 15:15 - 00107368 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIinit.dll

2015-08-22 04:58 - 2013-07-03 15:15 - 00035688 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIport.dll

2015-08-18 05:09 - 2013-11-06 16:25 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard

2015-08-15 17:19 - 2013-02-12 13:54 - 00025088 _____ C:\Users\User\Documents\CLOSE MENDOTA.xls

2015-08-14 14:07 - 2013-06-22 11:06 - 00000000 ____D C:\Users\User\AppData\Roaming\vlc

2015-08-14 14:06 - 2013-03-18 14:36 - 00000000 ____D C:\Users\User\Desktop\mdb

2015-08-14 04:58 - 2013-07-03 15:15 - 00122752 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIRfsClientNP.dll.000.bak

2015-08-13 09:38 - 2013-02-16 10:36 - 00000000 ____D C:\Users\User\AppData\Local\Adobe

2015-08-11 01:08 - 2013-02-26 00:32 - 15139256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2015-08-11 01:08 - 2013-02-26 00:32 - 12885072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2015-08-11 01:08 - 2012-09-24 13:21 - 17625848 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2015-08-11 01:08 - 2012-09-24 13:21 - 03417208 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2015-08-11 01:08 - 2012-09-24 13:21 - 01110768 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2015-08-10 23:43 - 2012-09-24 13:21 - 00030966 _____ C:\Windows\system32\nvinfo.pb

==================== Files in the root of some directories =======

2008-02-05 15:28 - 2008-02-05 15:28 - 0000051 _____ () C:\Users\User\AppData\Local\setup.txt

2013-02-23 11:17 - 2013-02-23 11:17 - 0000057 _____ () C:\ProgramData\Ament.ini

Some files in TEMP:

====================

C:\Users\host\AppData\Local\Temp\jre-8u45-windows-au.exe

C:\Users\User\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkvgrdw.dll

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-09-01 00:33

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version:06-09-2015 01

Ran by [removed] (2015-09-09 14:04:48)

Running from C:\Users\[removed]\Desktop

Windows 7 Professional Service Pack 1 (X64) (2013-02-12 17:11:01)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

AAx-DPR-SrvAcct (S-1-5-21-17798994-207464888-438797339-1005 - Administrator - Enabled) => C:\Users\AAx-DPR-SrvAcct

Administrator (S-1-5-21-17798994-207464888-438797339-500 - Administrator - Disabled)

Guest (S-1-5-21-17798994-207464888-438797339-501 - Limited - Enabled)

HomeGroupUser$ (S-1-5-21-17798994-207464888-438797339-1003 - Limited - Enabled)

host (S-1-5-21-17798994-207464888-438797339-1012 - Limited - Enabled) => C:\Users\host

M1-SKDCAccount (S-1-5-21-17798994-207464888-438797339-1006 - Administrator - Enabled)

UpdatusUser (S-1-5-21-17798994-207464888-438797339-1001 - Limited - Enabled) => C:\Users\UpdatusUser

User (S-1-5-21-17798994-207464888-438797339-1000 - Administrator - Enabled) => C:\Users\User

WORK (S-1-5-21-17798994-207464888-438797339-1011 - Limited - Enabled) => C:\Users\WORK

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET Smart Security 8.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: ESET Smart Security 8.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

FW: ESET Personal firewall (Disabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\…\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Ad-Aware Web Companion (x32 Version: 1.1.980.2014 - Lavasoft) Hidden

Adobe Flash Player 18 ActiveX (HKLM-x32\…\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)

Adobe Flash Player 18 NPAPI (HKLM-x32\…\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.12) (HKLM-x32\…\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.0 (HKLM-x32\…\Adobe Shockwave Player) (Version: 12.0.0.112 - Adobe Systems, Inc.)

Adobe SVG Viewer 3.0 (HKLM-x32\…\Adobe SVG Viewer) (Version: 3.0 - Adobe Systems, Inc.)

Apple Application Support (HKLM-x32\…\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)

Apple Mobile Device Support (HKLM\…\{B678797F-DF38-4556-8A31-8B818E261868}) (Version: 8.0.0.23 - Apple Inc.)

Apple Software Update (HKLM-x32\…\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Auslogics Disk Defrag (HKLM-x32\…\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 3.6 - Auslogics Software Pty Ltd)

Bing Bar (HKLM-x32\…\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)

Bonjour (HKLM\…\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Brother HL-5370DW (HKLM-x32\…\{6B3A1795-AE75-4F1E-BCAB-DEDD08316DE0}) (Version: 1.00 - Brother)

CDBurnerXP (HKLM\…\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.0.3717 - CDBurnerXP)

CheckReader Files (HKLM-x32\…\CheckReader Files) (Version: - )

Cisco Connect (HKLM-x32\…\Cisco Connect) (Version: 1.4.11299.0 - Cisco Consumer Products LLC)

Cisco WebEx Meetings (HKLM-x32\…\ActiveTouchMeetingClient) (Version: - Cisco WebEx LLC)

Crystal Reports XI Release 2 .NET 2005 Server (HKLM-x32\…\{A7FE99B6-E077-4F52-BC6A-E24C338F3C23}) (Version: 11.5.0.0 - Business Objects)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Data Acquisition (HKLM-x32\…\{B00D5E68-1352-4399-B950-66D978F9834D}_is1) (Version: Data Acquisition - )

Demandforce (HKLM-x32\…\InstallShield_{FDF54538-EE59-449E-829D-A54B42316074}) (Version: 3.0 - Demandforce)

Demandforce (x32 Version: 3.0 - Demandforce) Hidden

DigiOp Remote Manager (HKLM-x32\…\InstallShield_{F1DDDC82-6F20-4ACD-A6EA-397CF7003CC5}) (Version: 7.6.00934.0 - DigiopTechnologies)

DigiOp Remote Manager (x32 Version: 7.6.00934.0 - DigiopTechnologies) Hidden

Dropbox (HKU\S-1-5-21-17798994-207464888-438797339-1000\…\Dropbox) (Version: 3.8.8 - Dropbox, Inc.)

ESET Smart Security (HKLM\…\{293ADC3B-DCF3-44C2-9CE8-19DD2B4F7646}) (Version: 8.0.312.0 - ESET, spol s r. o.)

GDR 4033 for SQL Server 2008 R2 (KB2977320) (HKLM-x32\…\KB2977320) (Version: 10.52.4033.0 - Microsoft Corporation)

Gemcom32 (HKLM-x32\…\{85545F62-51FA-449E-95B5-4442DE267E7D}) (Version: 1.08.08 - VeriFone)

GIMP 2.8.4 (HKLM\…\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team)

Google Chrome (HKU\S-1-5-21-17798994-207464888-438797339-1000\…\Google Chrome) (Version: 45.0.2454.85 - Google Inc.)

Google Earth (HKLM-x32\…\{6F545E5E-4595-11E2-93B6-B8AC6F97B88E}) (Version: 7.0.2.8415 - Google)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.28.13 - Google Inc.) Hidden

HP FWUpdateEDO2 (HKLM-x32\…\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)

HP Officejet Pro 8600 Basic Device Software (HKLM\…\{791A06E2-340F-43B0-8FAB-62D151339362}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Officejet Pro 8600 Help (HKLM-x32\…\{46235FF7-2CBE-4A84-BEDA-87348D1F7850}) (Version: 28.0.0 - Hewlett Packard)

HP Officejet Pro 8600 Product Improvement Study (HKLM\…\{2BF5E9CC-C55D-4B0F-ACAF-FFE77F333CD8}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Support Solutions Framework (HKLM-x32\…\{FC3C2B77-6800-48C6-A15D-9D1031130C16}) (Version: 11.51.0049 - Hewlett-Packard Company)

HP Update (HKLM-x32\…\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)

HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden

I.R.I.S. OCR (HKLM-x32\…\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)

Intel(R) Network Connections 17.4.95.0 (HKLM\…\PROSetDX) (Version: 17.4.95.0 - Intel)

Intel(R) Processor Graphics (HKLM-x32\…\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2761 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM-x32\…\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.2.0.1006 - Intel Corporation)

IPCWebComponents 3.0.0.1 (HKLM-x32\…\{4740E1B2-51CF-4083-8976-D6B3B5A5064F}_is1) (Version: 3.0.0.1 - )

iTunes (HKLM\…\{F46AA0F1-E284-4878-A462-5F11B9166C0E}) (Version: 11.4.0.18 - Apple Inc.)

Java 7 Update 13 (64-bit) (HKLM\…\{26A24AE4-039D-4CA4-87B4-2F86417013FF}) (Version: 7.0.130 - Oracle)

Java 7 Update 71 (HKLM-x32\…\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.710 - Oracle)

Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

LavasoftTcpService (x32 Version: 2.3.3.0 - Lavasoft) Hidden

LINQPad 4 (HKLM-x32\…\{758485A7-8E93-4864-A3A8-D628C093B639}_is1) (Version: - Joseph Albahari)

LocK-A-FoLdeR (HKLM-x32\…\LocK-A-FoLdeR) (Version: 3.9.2 - )

LogMeIn (HKLM-x32\…\{CB7AF84A-1B7F-4C6B-8A58-EB7CDE48C23A}) (Version: 4.1.3268 - LogMeIn, Inc.)

M1-SK Automatic Updater (Host) (HKLM-x32\…\{7684FCB4-E0A6-475C-80D0-9074D89DE176}) (Version: 0.9.17 - Mitchell 1)

Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.2 (HKLM\…\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft IntelliPoint 8.2 (HKLM\…\Microsoft IntelliPoint 8.2) (Version: 8.20.468.0 - Microsoft Corporation)

Microsoft Office (HKLM-x32\…\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\…\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)

Microsoft Office File Validation Add-In (HKLM-x32\…\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Home and Student 2007 (HKLM-x32\…\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\…\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server 2008 R2 (HKLM-x32\…\Microsoft SQL Server 2008 R2) (Version: - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Native Client (HKLM\…\{E8F7904A-4780-4F3F-B153-21BE32857120}) (Version: 10.52.4033.0 - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Setup (English) (HKLM\…\{B2213E4E-F502-4D36-BE95-9293C866EF3F}) (Version: 10.52.4042.0 - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Setup (English) (HKLM-x32\…\{DAB2D121-A8A3-4E92-A7E5-4319F928735F}) (Version: 10.52.4033.0 - Microsoft Corporation)

Microsoft SQL Server 2008 Setup Support Files (HKLM-x32\…\{D441BD04-E548-4F8E-97A4-1B66135BAAA8}) (Version: 10.1.2731.0 - Microsoft Corporation)

Microsoft SQL Server Browser (HKLM-x32\…\{BF9BF038-FE03-429D-9B26-2FA0FD756052}) (Version: 10.52.4000.0 - Microsoft Corporation)

Microsoft SQL Server VSS Writer (HKLM\…\{288D79EE-A2D1-42AF-9597-B0ADCC23A8ED}) (Version: 10.52.4000.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\…\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\…\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\…\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Mighty Catalog DVD (HKLM-x32\…\{6CB3A22C-B936-410D-921A-A28CFEFF3801}) (Version: 1.00.000 - Mighty Auto Parts)

Mitchell 1 TeamWorks SE - Host (x32 Version: 6.5.20 - Mitchell 1) Hidden

Mitchell 1 TeamWorks SE - Workstation (x32 Version: 6.5.20 - Mitchell 1) Hidden

Mitchell1 DataProtection (HKLM-x32\…\{6DC4A46B-F3A3-459C-8FE4-4B4FF49AFCE3}) (Version: 2.50.0000 - Mitchell 1)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\…\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\…\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP2 Parser and SDK (HKLM-x32\…\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)

NETGEAR Genie (HKLM-x32\…\NETGEAR Genie) (Version: 2.4.12.00 - NETGEAR Inc.)

NETGEAR Live Parental Controls Management Utility 2.1.6 (HKLM-x32\…\NETGEAR Live Parental Controls Management Utility) (Version: 2.1.6 - )

NVIDIA 3D Vision Controller Driver 301.42 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 301.42 - NVIDIA Corporation)

NVIDIA 3D Vision Driver 353.82 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.82 - NVIDIA Corporation)

NVIDIA Graphics Driver 353.82 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.82 - NVIDIA Corporation)

NVIDIA HD Audio Driver 1.3.34.3 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.12.0213 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0213 - NVIDIA Corporation)

NVIDIA Update 10.4.0 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)

OnDemand5 Manager Host (HKLM-x32\…\OnDemand5 Manager Host) (Version: - )

OnDemand5 Manager Workstation (HKLM-x32\…\OnDemand5 Manager Workstation) (Version: - )

OnDemand5 ManagerPlus Demo (HKLM-x32\…\OnDemand5 ManagerPlus Demo) (Version: - )

PINPadDevice Files (HKLM-x32\…\PINPadDevice Files) (Version: - )

PL-2303 USB-to-Serial (HKLM-x32\…\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.4.17 - Prolific Technology INC)

PRI*SCAN (HKLM-x32\…\{74053DBB-CCDD-4D83-A2BB-5AEE45297F60}) (Version: 4.0.0.0 - The Scan Group: A division of AIS, Inc.)

RDM Control Object (x32 Version: - ) Hidden

RDM USB Driver (x32 Version: - ) Hidden

RDMSOService (x32 Version: - ) Hidden

REALTEK GbE & FE Ethernet PCI NIC Driver (HKLM-x32\…\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}) (Version: 1.23.0000 - Realtek)

REALTEK GbE & FE Ethernet PCI-E NIC Driver (HKLM-x32\…\{C9BED750-1211-4480-B1A5-718A3BE15525}) (Version: 1.30.0000 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)

Remote Client (HKLM-x32\…\{8CE64F72-AA39-4EAD-B461-02D322FA653C}) (Version: - )

Revo Uninstaller 1.94 (HKLM-x32\…\Revo Uninstaller) (Version: 1.94 - VS Revo Group)

RS Marketing Tools version 1.0 (HKLM-x32\…\{B2D1A3B1-2FDE-4E3E-972F-14BF1807E8B0}_is1) (Version: 1.0 - RS Marketing Tools)

Sapphire Management Suite 1.09.09 10152010 (HKLM-x32\…\{0E85DAED-A62B-44CC-BB9E-2D41C0E57B1B}) (Version: 1.09.09 10152010 - VeriFone)

Service Pack 2 for SQL Server 2008 R2 (KB2630458) (HKLM-x32\…\KB2630458) (Version: 10.52.4000.0 - Microsoft Corporation)

Shop Management Host (HKLM-x32\…\{519010a1-714d-4b65-a51f-7899846190f9}) (Version: 6.5.20 - Mitchell 1)

Skype™ 7.3 (HKLM-x32\…\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)

SQL Server 2008 R2 SP2 Common Files (x32 Version: 10.52.4000.0 - Microsoft Corporation) Hidden

SQL Server 2008 R2 SP2 Database Engine Services (x32 Version: 10.52.4000.0 - Microsoft Corporation) Hidden

SQL Server 2008 R2 SP2 Database Engine Shared (x32 Version: 10.52.4000.0 - Microsoft Corporation) Hidden

Sql Server Customer Experience Improvement Program (x32 Version: 10.50.1600.1 - Microsoft Corporation) Hidden

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

System Requirements Lab (HKLM-x32\…\{FAB9454C-6A8D-4031-9652-8B1B1D561456}) (Version: 6.0.7.0 - Husdawg, LLC)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\…\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)

VLC media player (HKLM-x32\…\VLC media player) (Version: 2.2.1 - VideoLAN)

Web Companion (HKLM-x32\…\{65972064-0C2B-4710-A3F8-825F26636993}_WebCompanion) (Version: 1.1.980.2014 - Lavasoft)

Windows Live Essentials (HKLM-x32\…\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)

Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\…\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)

Windows Mobile Device Center (HKLM\…\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)

Windows Mobile Device Center Driver Update (HKLM\…\{92DBCA36-9B41-4DD1-941A-AED149DD37F0}) (Version: 6.1.6965.0 - Microsoft Corporation)

WORLDPAC speedDIAL (HKLM-x32\…\WORLDPAC speedDIAL_is1) (Version: - WORLDPAC)

XCharge (HKLM-x32\…\XCharge) (Version: - )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll No File

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll No File

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll No File

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll No File

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-17798994-207464888-438797339-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File

==================== Restore Points =========================

06-09-2015 19:00:21 Windows Backup

08-09-2015 07:55:01 Windows Update

08-09-2015 10:16:13 Windows Update

09-09-2015 11:32:04 LavasoftWeCompanion

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00D68790-8FD1-44A1-99A3-40CE683CDDAB} - System32\Tasks\HPCustParticipation HP Officejet Pro 8600 => C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)

Task: {0117BFC4-66E3-4E6E-AF82-57428975F117} - System32\Tasks\Demandforce DFLink Upload => C:\Program Files (x86)\Demandforce D3\DFLink\DFLink.exe [2015-08-12] (Demandforce)

Task: {03E01C67-F06D-48CD-99C0-8EBF76B279A4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)

Task: {1B7BF1F3-B51A-41B0-BC59-3CAC54F69AF2} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-17798994-207464888-438797339-1000UA => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)

Task: {2EDEAC15-86FD-4493-9A3C-8B0EF5C1989D} - System32\Tasks\DataAcquisitionMUDLICK => C:\Program Files (x86)\Mitchell 1\CRM\Data Acquisition\DataAcquisitionRemote.exe

Task: {3D078A47-C18B-4FDA-9968-E65904193D02} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-17798994-207464888-438797339-1000UA => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

Task: {46ECBCCF-E72C-46AB-B50C-2B17D910347C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)

Task: {5F7FED16-D0CE-415D-811C-F88C2F62C1D6} - System32\Tasks\CustomerLink => C:\custlink\Customerlink.BAT [2013-12-19] ()

Task: {65585A89-DD90-4CB3-9CA6-1F9EEF153BB0} - System32\Tasks\Demandforce DFLink Update => C:\Program Files (x86)\Demandforce D3\DFLink\DFUpdate.exe [2015-09-02] (Demandforce)

Task: {6B87AE7C-1610-4A2A-8AEE-3336CE869E12} - System32\Tasks\DataAcquisition => C:\Program Files (x86)\Mitchell 1\CRM\Data Acquisition\DataAcquisitionRemote.exe

Task: {972E5770-2E1E-44BF-AE39-98CB2312713B} - System32\Tasks\M1SKSoftwareUpdatesHost => C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\M1-SK.exe [2015-04-01] (Snap-on)

Task: {B4C18E50-26D8-4991-AD76-76141B5A152C} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-17798994-207464888-438797339-1000Core => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)

Task: {E3BC7CB9-58F3-4DDD-BACE-E288918BB3C2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)

Task: {F3697622-8A06-497D-9816-A8C72BD1BD97} - System32\Tasks\{35702299-F87C-436C-A938-310D4CC0BE08} => pcalua.exe -a D:\install.exe -d D:\

Task: {F5C6684C-3665-4AD3-8CBA-7A08CD082410} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-13] (Adobe Systems Incorporated)

Task: {FE9528D4-AF0C-40B3-8D55-483E3D81C5C1} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-17798994-207464888-438797339-1000Core => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

Task: {FF4DA803-D79D-4FA5-BABD-F1293AFA66B5} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-08-01] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\DataAcquisition.job => C:\Program Files (x86)\Mitchell 1\CRM\Data Acquisition\DataAcquisitionRemote.exe

Task: C:\Windows\Tasks\DataAcquisitionMUDLICK.job => C:\Program Files (x86)\Mitchell 1\CRM\Data Acquisition\DataAcquisitionRemote.exe

Task: C:\Windows\Tasks\Demandforce DFLink Update.job => C:\Program Files (x86)\Demandforce D3\DFLink\DFUpdate.exe

Task: C:\Windows\Tasks\Demandforce DFLink Upload.job => C:\Program Files (x86)\Demandforce D3\DFLink\DFLink.exe

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-17798994-207464888-438797339-1000Core.job => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-17798994-207464888-438797339-1000UA.job => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-17798994-207464888-438797339-1000Core.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-17798994-207464888-438797339-1000UA.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-04-27 21:37 - 2015-04-27 21:37 - 00017768 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe

2015-04-27 21:37 - 2015-04-27 21:37 - 00012144 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Service.Logger.dll

2015-04-27 21:37 - 2015-04-27 21:37 - 00034664 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WcfService.dll

2014-07-15 10:53 - 2013-05-15 17:30 - 02073088 _____ () C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\XCSecurityService.exe

2012-09-24 13:21 - 2015-08-06 19:44 - 00116528 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-07-15 10:53 - 2013-05-15 17:26 - 14758400 _____ () C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\XChrgSrv.exe

2015-01-25 20:57 - 2014-05-19 21:30 - 00061440 _____ () C:\Program Files (x86)\RSMarketingTools\service.exe

2015-01-25 20:57 - 2014-06-23 19:31 - 00061440 _____ () C:\Program Files (x86)\RSMarketingTools\updater\updater.exe

2015-06-01 22:14 - 2015-06-01 22:14 - 00105216 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\genie2_tray.exe

2013-02-19 09:05 - 2012-01-05 18:58 - 00077824 _____ () C:\speedDIAL\speedDIAL.exe

2014-07-31 12:16 - 2014-07-31 12:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-07-31 12:16 - 2014-07-31 12:16 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2014-07-15 10:53 - 2013-05-09 11:52 - 00520190 _____ () C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\sqlite3.dll

2014-12-02 16:11 - 2014-12-02 16:11 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\57e63ede7c5ccf9128691bfe9446c6cb\IsdiInterop.ni.dll

2012-09-24 13:23 - 2012-05-30 15:55 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

2015-09-08 11:31 - 2015-09-08 11:31 - 00071168 _____ () c:\users\user\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkvgrdw.dll

2015-03-04 16:45 - 2015-08-05 00:26 - 00012800 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll

2015-03-04 16:45 - 2015-08-05 00:26 - 00779776 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll

2015-07-30 17:42 - 2015-08-05 00:26 - 00056320 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll

2015-03-04 16:45 - 2015-08-05 00:26 - 00012288 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll

2014-07-15 10:53 - 2013-05-15 17:29 - 01981440 _____ () C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\XCGPN.dll

2014-07-15 10:53 - 2013-05-15 17:28 - 01042432 _____ () C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\XCGPNIP.dll

2014-07-15 10:53 - 2013-05-15 17:29 - 01747456 _____ () C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\XCDM.dll

2015-01-25 20:57 - 2012-02-17 14:45 - 00077952 _____ () C:\Program Files (x86)\RSMarketingTools\sqljdbc_auth.dll

2014-10-08 05:37 - 2014-10-08 05:37 - 00018432 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\SnapOn.Interfaces.A#\4d2bb59f79707799ccadc0c190972aaa\SnapOn.Interfaces.AttributeSelection.ni.dll

2013-10-24 12:06 - 2013-10-24 12:06 - 00076168 _____ () C:\Program Files (x86)\M1-SK\Teamworks\Catalogs\Mitchell1.Catalog.ACL.dll

2013-10-24 12:06 - 2013-10-24 12:06 - 00026000 _____ () C:\Program Files (x86)\M1-SK\Teamworks\Catalogs\Mitchell1.Catalog.Activant.dll

2013-10-24 12:07 - 2013-10-24 12:07 - 00092552 _____ () C:\Program Files (x86)\M1-SK\Teamworks\Catalogs\Mitchell1.Catalog.IAP.dll

2013-10-24 12:06 - 2013-10-24 12:06 - 00076168 _____ () C:\Program Files (x86)\M1-SK\Teamworks\Catalogs\Mitchell1.Catalog.AutoI.dll

2013-10-24 12:07 - 2013-10-24 12:07 - 00047504 _____ () C:\Program Files (x86)\M1-SK\Teamworks\Catalogs\Mitchell1.Catalog.eStore.dll

2013-03-07 14:25 - 2013-03-07 14:25 - 00072120 _____ () C:\Program Files (x86)\M1-SK\Teamworks\Catalogs\Mitchell1.Catalog.FirstCall.dll

2013-10-24 12:07 - 2015-01-27 14:28 - 00025392 _____ () C:\Program Files (x86)\M1-SK\Teamworks\Catalogs\Mitchell1.Catalog.NexPart.dll

2013-10-24 12:07 - 2015-01-27 14:28 - 00108848 _____ () C:\Program Files (x86)\M1-SK\Teamworks\Catalogs\Mitchell1.Catalog.WHI.dll

2013-10-24 12:07 - 2015-01-27 14:28 - 00025392 _____ () C:\Program Files (x86)\M1-SK\Teamworks\Catalogs\Mitchell1.Catalog.WiseConnect.dll

2013-10-24 12:07 - 2013-10-24 12:07 - 00121232 _____ () C:\Program Files (x86)\M1-SK\Teamworks\Catalogs\Mitchell1.Catalog.WorldPac.dll

2011-08-09 07:53 - 2011-08-09 07:53 - 00065472 _____ () C:\Program Files (x86)\M1-SK\Teamworks\Catalogs\Sbs.Snapon.Catalog.dll

2015-07-14 18:20 - 2015-07-14 18:20 - 00756376 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL

2013-09-28 20:14 - 2013-09-28 20:14 - 03369922 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\icuin51.dll

2013-09-28 20:13 - 2013-09-28 20:13 - 00544817 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\libgcc_s_dw2-1.dll

2013-09-28 20:13 - 2013-09-28 20:13 - 00989805 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\libstdc++-6.dll

2013-09-28 20:14 - 2013-09-28 20:14 - 01978690 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\icuuc51.dll

2013-09-28 20:14 - 2013-09-28 20:14 - 22378434 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\icudt51.dll

2013-09-28 20:14 - 2013-09-28 20:14 - 01233408 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\platforms\qwindows.dll

2015-06-12 05:43 - 2015-06-12 05:43 - 00657408 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\Genie.dll

2015-04-08 03:52 - 2015-04-08 03:52 - 01688576 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\SvtNetworkTool.dll

2013-09-28 20:13 - 2013-09-28 20:13 - 00051200 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qgif.dll

2013-08-25 14:07 - 2013-08-25 14:07 - 00052224 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qico.dll

2013-09-28 20:13 - 2013-09-28 20:13 - 00261120 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qjpeg.dll

2013-08-25 14:16 - 2013-08-25 14:16 - 00381952 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qmng.dll

2013-08-25 14:09 - 2013-08-25 14:09 - 00046080 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qsvg.dll

2013-08-25 14:16 - 2013-08-25 14:16 - 00046080 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qtga.dll

2013-08-25 14:16 - 2013-08-25 14:16 - 00390144 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qtiff.dll

2013-08-25 14:16 - 2013-08-25 14:16 - 00045056 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qwbmp.dll

2015-05-25 04:44 - 2015-05-25 04:44 - 00192512 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Airprint.dll

2015-06-02 00:15 - 2015-06-02 00:15 - 00602624 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Internet.dll

2015-06-15 02:03 - 2015-06-15 02:03 - 06724096 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Map.dll

2014-06-29 20:55 - 2014-06-29 20:55 - 00068608 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\QRCode.dll

2014-06-29 21:05 - 2014-06-29 21:05 - 01183232 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\qwt.dll

2015-06-15 02:04 - 2015-06-15 02:04 - 03101696 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_MyMedia.dll

2012-10-15 15:27 - 2012-10-15 15:27 - 00111616 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\libvlc.dll

2012-10-15 15:28 - 2012-10-15 15:28 - 02286592 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\libvlccore.dll

2015-05-25 04:59 - 2015-05-25 04:59 - 01057280 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_NetworkProblem.dll

2014-09-11 03:39 - 2014-09-11 03:39 - 00144896 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\DragonNetTool.dll

2015-05-25 04:57 - 2015-05-25 04:57 - 01202688 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_ParentalControl.dll

2015-06-12 04:49 - 2015-06-12 04:49 - 11253248 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Resource.dll

2015-05-25 05:03 - 2015-05-25 05:03 - 02584576 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_RouterConfiguration.dll

2015-05-25 05:03 - 2015-05-25 05:03 - 00200192 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Statistics.dll

2015-05-25 05:04 - 2015-05-25 05:04 - 00891904 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Ui.dll

2015-05-25 05:05 - 2015-05-25 05:05 - 00438272 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Wireless.dll

2014-06-29 20:55 - 2014-06-29 20:55 - 00081408 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\DiagnosePlugin.dll

2015-04-17 05:36 - 2015-04-17 05:36 - 00146944 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\DiagnoseDll.dll

2015-06-03 08:53 - 2015-06-03 08:53 - 02356956 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\drivers\libntgr_api.dll

2015-02-03 05:09 - 2015-02-03 05:09 - 00072192 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\SVTUtils.dll

2014-09-04 01:00 - 2014-09-04 01:00 - 00074240 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\NetcardApi.dll

2014-09-04 01:00 - 2014-09-04 01:00 - 00136704 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\airprintdll.dll

2012-10-15 15:28 - 2012-10-15 15:28 - 00219648 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\plugins\access\libdshow_plugin.dll

2012-10-15 15:28 - 2012-10-15 15:28 - 00049664 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\plugins\audio_output\libaout_directx_plugin.dll

2012-10-15 15:28 - 2012-10-15 15:28 - 00051200 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\plugins\audio_output\libwaveout_plugin.dll

2012-10-15 15:28 - 2012-10-15 15:28 - 00070144 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\plugins\video_output\libdirectx_plugin.dll

2015-05-25 05:05 - 2015-05-25 05:05 - 00642048 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\InnerPlugin_Update.dll

2015-05-25 05:06 - 2015-05-25 05:06 - 00458752 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\InnerPlugin_WirelessExport.dll

2014-06-29 21:33 - 2014-06-29 21:33 - 00046080 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\WSetupApiPlugin.dll

2014-09-04 01:00 - 2014-09-04 01:00 - 00066560 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\WSetupDll.dll

2013-09-28 20:13 - 2013-09-28 20:13 - 00040960 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\printsupport\windowsprintersupport.dll

2015-09-03 16:57 - 2015-08-27 19:17 - 01501512 _____ () C:\Users\User\AppData\Local\Google\Chrome\Application\45.0.2454.85\libglesv2.dll

2015-09-03 16:57 - 2015-08-27 19:17 - 00081224 _____ () C:\Users\User\AppData\Local\Google\Chrome\Application\45.0.2454.85\libegl.dll

2015-09-03 16:57 - 2015-08-27 19:17 - 16393032 _____ () C:\Users\User\AppData\Local\Google\Chrome\Application\45.0.2454.85\PepperFlash\pepflashplayer.dll

2015-04-27 21:37 - 2015-04-27 21:37 - 00078656 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.Utils.dll

2015-04-27 21:37 - 2015-04-27 21:37 - 00181608 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Business.dll

2015-04-27 21:37 - 2015-04-27 21:37 - 00046920 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.adblocker.dll

2015-04-27 21:37 - 2015-04-27 21:37 - 00033136 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Repositories.dll

2015-04-27 21:37 - 2015-04-27 21:37 - 00015696 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.Utils.SqlLite.dll

2015-04-27 21:38 - 2015-04-27 21:38 - 00123736 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.PUP.Management.dll

2015-04-27 21:38 - 2015-04-27 21:38 - 00074056 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SysInfo.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-17798994-207464888-438797339-1000\…\firstcallonline.com -> firstcallonline.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-17798994-207464888-438797339-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

HKU\S-1-5-21-17798994-207464888-438797339-1001\Control Panel\Desktop\\Wallpaper -> %windir%\web\wallpaper\windows\img0.jpg

HKU\S-1-5-21-17798994-207464888-438797339-1005\Control Panel\Desktop\\Wallpaper -> %windir%\web\wallpaper\windows\img0.jpg

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)

Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe

FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe

FirewallRules: [{C6809AC5-B1E1-4F10-B599-028A97AAC2FC}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{EF78F655-1A16-4DF6-BFFB-0C5CF4C8C269}] => (Allow) LPort=2869

FirewallRules: [{C41EE990-CC78-4202-9E6C-85F415FE4B0B}] => (Allow) LPort=1900

FirewallRules: [{AA0D0E3E-5330-41C5-BFA6-13CBEB73DEC0}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{3CD21A48-BF12-40F7-A882-2086EA4241B9}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe

FirewallRules: [TCP Query User{8F7453AE-2012-4FAF-A938-298B3D167333}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe

FirewallRules: [UDP Query User{EFD8C8DE-566A-4C9A-89E8-9B16351451AA}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe

FirewallRules: [{4D670975-E747-4C79-85F4-0B8646D3E5E3}] => (Block) C:\program files (x86)\internet explorer\iexplore.exe

FirewallRules: [{4CCD6FEB-A6AD-468C-84A5-B7DF23972ABD}] => (Block) C:\program files (x86)\internet explorer\iexplore.exe

FirewallRules: [TCP Query User{162648AD-B77F-47F3-84D1-A9C6F07D3DC9}C:\speeddial\speeddial.exe] => (Allow) C:\speeddial\speeddial.exe

FirewallRules: [UDP Query User{ECE1C443-BFFB-426B-BDE4-7E4F2E1C7CBE}C:\speeddial\speeddial.exe] => (Allow) C:\speeddial\speeddial.exe

FirewallRules: [{BC25B4C4-A15B-4DB1-851A-CCE2165CCE28}] => (Block) C:\speeddial\speeddial.exe

FirewallRules: [{6D7F5E7C-EE26-4CB4-A4EB-5836D714752F}] => (Block) C:\speeddial\speeddial.exe

FirewallRules: [TCP Query User{AB431734-EE85-43A9-B8C1-FA7326BB8A15}C:\mitchell1\manager\series1\program\series10.exe] => (Allow) C:\mitchell1\manager\series1\program\series10.exe

FirewallRules: [UDP Query User{626A840F-4001-4111-809B-DD0932C408F6}C:\mitchell1\manager\series1\program\series10.exe] => (Allow) C:\mitchell1\manager\series1\program\series10.exe

FirewallRules: [{2EDB8139-7A6C-4AF2-99E7-EBD0A36AEFFB}] => (Block) C:\mitchell1\manager\series1\program\series10.exe

FirewallRules: [{8B025616-AEF1-4623-A383-47EEE8FDDC49}] => (Block) C:\mitchell1\manager\series1\program\series10.exe

FirewallRules: [TCP Query User{D5A56360-3A98-4C17-8F17-223FB18137FD}C:\mitchell1\manager\s2demo\series20.exe] => (Allow) C:\mitchell1\manager\s2demo\series20.exe

FirewallRules: [UDP Query User{3448EE1D-1ACE-4482-80AE-FDCB26CC717D}C:\mitchell1\manager\s2demo\series20.exe] => (Allow) C:\mitchell1\manager\s2demo\series20.exe

FirewallRules: [{272B8B79-248A-4408-9A93-8C122F51C50C}] => (Block) C:\mitchell1\manager\s2demo\series20.exe

FirewallRules: [{0C4B7FF6-0D99-4BFB-AFF0-78886AF08724}] => (Block) C:\mitchell1\manager\s2demo\series20.exe

FirewallRules: [TCP Query User{50DA8CBD-9A28-42A0-9549-552EF0C70B01}C:\users\user\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe] => (Allow) C:\users\user\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe

FirewallRules: [UDP Query User{71EAFAB8-D251-48ED-9024-43DF7C3C7042}C:\users\user\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe] => (Allow) C:\users\user\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe

FirewallRules: [{C8277257-BE32-4C13-A604-9A91A12E3192}] => (Block) C:\users\user\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe

FirewallRules: [{1EA1E841-9ADA-4B62-91F9-349E7AE616DD}] => (Block) C:\users\user\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe

FirewallRules: [{0719A2F3-C8A8-482E-8B91-67B91FBF0B48}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{78C8ADCF-6DC1-41E5-91F9-26FBD28C171F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{6018525D-BFA6-47BD-8E8C-3BAA9F3D8097}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{623E1519-8AAE-4EFC-9056-9FE612AF2729}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{69861A0D-2324-4E0A-96C5-C7A80DCD8B48}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{FFB1D65A-47D6-4B90-99D1-1493E4048B68}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{1D56D1BA-27C5-45B8-AF81-647E1113F869}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\FaxApplications.exe

FirewallRules: [{5FF40BE3-9099-4A2F-8082-627EC19708A7}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\DigitalWizards.exe

FirewallRules: [{01CAB9F5-C0C9-4722-B1F8-33F33F0ABFAE}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\SendAFax.exe

FirewallRules: [{B0DE5317-19B6-425B-A9C6-1E763CECA7E7}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\DeviceSetup.exe

FirewallRules: [{76CDF4AB-B3B5-4FB6-B0CE-75BF091876B1}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe

FirewallRules: [{8E3C3E13-56DD-43D5-823D-00C0F40B3B5A}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicatorCom.exe

FirewallRules: [{28DF3F43-CB0D-4636-94BF-C72C95C4E926}] => (Allow) C:\Program Files (x86)\DD20.4.8201404080844\DualDesk.exe

FirewallRules: [{0615572E-0156-4E3E-8660-E49537553434}] => (Allow) C:\Program Files (x86)\DD20.4.8201404080844\DualDesk.exe

FirewallRules: [{EB5E9605-1ACD-43FC-9C16-48BAA83C35E4}] => (Allow) C:\Program Files (x86)\DD20.4.8201404080844\DualDesk.exe

FirewallRules: [{F189B84C-195D-4A33-B9AF-72AB4A9C2C53}] => (Allow) C:\Program Files (x86)\DD20.4.8201404080844\DualDesk.exe

FirewallRules: [{E925729F-41ED-4A31-BE7D-62543DDE7E39}] => (Allow) C:\Program Files (x86)\X-Charge\XCharge.exe

FirewallRules: [{FEE2D939-1658-4834-BD68-0EA3D9F5E5E9}] => (Allow) C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\XChrgSrv.exe

FirewallRules: [{D108475B-A82F-470A-9904-7FB28BC97CFB}] => (Allow) C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\XCSecurityService.exe

FirewallRules: [{ABAB890E-E2F9-4A08-A189-FFE4A3D4125C}] => (Allow) C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\XCUpgrade.exe

FirewallRules: [{F95E6060-C0B1-46A9-A539-00E9FF644028}] => (Allow) c:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.SHOPSTREAM\MSSQL\Binn\sqlservr.exe

FirewallRules: [{47510EFA-0C2C-4A79-B3D3-6FD4600B6E43}] => (Allow) c:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.SHOPSTREAM\MSSQL\Binn\sqlservr.exe

FirewallRules: [{BA0C769F-D785-46CA-8424-0E2FF624D9AF}] => (Allow) LPort=1433

FirewallRules: [{3B339707-94FA-43E9-A5F4-46D976C34C58}] => (Allow) LPort=1433

FirewallRules: [{41A17663-DBDF-49EA-977C-93DAAFB108DA}] => (Allow) LPort=1434

FirewallRules: [{0DCAD213-BBF3-4373-82BC-967746105329}] => (Allow) LPort=1434

FirewallRules: [{3EE5AF7C-960A-4CBC-94F6-F972E20D6C67}] => (Allow) LPort=8091

FirewallRules: [{A4335211-3A2B-4772-9882-89AF74222F87}] => (Allow) LPort=8091

FirewallRules: [{5956DD90-631C-4E00-88B7-FDC3453E3A63}] => (Allow) C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\FileSystemMonitorService.exe

FirewallRules: [{4A029007-4A56-40C8-B52F-B717A927AEBF}] => (Allow) C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\FileSystemMonitorService.exe

FirewallRules: [{FC521828-F06E-4504-86B1-69C515ADB87F}] => (Allow) C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\M1-SK.exe

FirewallRules: [{1707E7A9-5398-49A4-8E71-4CF5685971D7}] => (Allow) C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\M1-SK.exe

FirewallRules: [{2E23D38F-808F-4BA1-B12F-C13179DC3785}] => (Allow) C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\M1-SKDiagnose.exe

FirewallRules: [{DA5A0EC7-35D0-47FC-BB7C-A4ECB20743F0}] => (Allow) C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\M1-SKDiagnose.exe

FirewallRules: [{69DE45B6-3719-4D47-83C6-472288A29359}] => (Allow) C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\M1-SKUpd.exe.exe

FirewallRules: [{2A83FE2D-92B2-4E97-9772-BC77EC438348}] => (Allow) C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\M1-SKUpd.exe.exe

FirewallRules: [{1F022871-F05C-492E-9983-DBE0414D924D}] => (Allow) C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\M1-SKUpdater.exe

FirewallRules: [{2CE6C5D9-4149-4180-A8DE-71D624766E54}] => (Allow) C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\M1-SKUpdater.exe

FirewallRules: [{BF783601-7FB1-4BE2-BF2B-77A0C088301B}] => (Allow) C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\M1-SKInstallerUtil.exe

FirewallRules: [{BB8B9E76-E09F-44DE-8490-D729A69D510C}] => (Allow) C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\M1-SKInstallerUtil.exe

FirewallRules: [{23CC7803-BBCB-4EE9-B278-37F0CAE61A01}] => (Allow) LPort=8080

FirewallRules: [{1CEA68DD-8BF6-4B35-83C8-0516A805C83B}] => (Allow) LPort=8080

FirewallRules: [{1F51EEDC-EB58-40CF-A6E2-6595618EA615}] => (Allow) LPort=8081

FirewallRules: [{B4AF9E69-7FBB-4847-80A5-DC5C67D723CD}] => (Allow) LPort=8081

FirewallRules: [{A06D946C-C164-4D57-94A6-8E7443135042}] => (Allow) LPort=8085

FirewallRules: [{A2506499-68A5-4B77-A2DE-E784DDBF225D}] => (Allow) LPort=8085

FirewallRules: [{8A20402C-B5C8-4B69-AD1D-8382C99666B9}] => (Allow) LPort=8001

FirewallRules: [{544F4772-CF55-46A8-AF77-EC779BD9EE6F}] => (Allow) LPort=8001

FirewallRules: [{CA212A12-BA6B-48A8-B88F-D8905137CFBC}] => (Allow) LPort=8002

FirewallRules: [{0E06C833-452B-4BE5-AD82-6BD8790199B6}] => (Allow) LPort=8002

FirewallRules: [{D796E06D-0562-469B-8CF8-63944FD4DBF0}] => (Allow) LPort=8006

FirewallRules: [{19B1151E-00A7-4A96-8679-7F3151F3EAF1}] => (Allow) LPort=8006

FirewallRules: [{FBACCE42-FF6D-4E3E-9D11-94DD14172A93}] => (Allow) LPort=8010

FirewallRules: [{5287BB47-FCC0-455F-9750-EB2BE6B01BFF}] => (Allow) LPort=8010

FirewallRules: [{B8772296-D3C1-47E5-8D47-4258CB4D757E}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe

FirewallRules: [{F03ADDFE-1026-4E5C-970B-5A595F05A6A5}] => (Allow) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{E9B14AD7-2285-44BF-B072-49FF21E1E9A6}] => (Allow) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{A4B11B10-F738-4935-AD93-BB9339EAAEE7}] => (Allow) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{0401044D-844B-4D59-8A7B-8F29D5C18C16}] => (Allow) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{1C06EF79-C06F-44CE-9B86-3F39B5765E8F}] => (Allow) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe

FirewallRules: [{A7716758-CBC8-42F3-B24B-84C44C77DD18}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

==================== Faulty Device Manager Devices =============

Name: Microsoft Virtual WiFi Miniport Adapter

Description: Microsoft Virtual WiFi Miniport Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: vwifimp

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

==================== Event log errors: =========================

Application errors:

==================

Error: (09/09/2015 02:03:23 PM) (Source: Mitchell1.DPR.BCS) (EventID: 0) (User: )

Description: Timestamp: 9/9/2015 7:03:23 PM

Message: Exception caught: Unexpected exception in McsProvider

An exception occurred during a WebClient request.

Error creating the Web Proxy specified in the 'system.net/defaultProxy' configuration section.

The parameter is incorrect

. StackTrace at Mitchell1.DPR.BCS.MCSProvider.McsProvider.SendToServer[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.MakeRestCallNoResult[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.UploadInstrumentation(IEnumerable`1 messages)

at Mitchell1.DPR.BCS.BcsService.BackupAgent.UploadAndPurgeLogs()

Category: Error

Priority: -1

EventId: 0

Severity: Error

Title:

Machine: MAIN

App Domain: Mitchell1.DPR.BCS.exe

ProcessId: 2440

Process Name: C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.BCS.exe

Thread Name:

Win32 ThreadId:8364

Extended Properties:

Error: (09/09/2015 02:03:23 PM) (Source: Mitchell1.DPR.BCS) (EventID: 0) (User: )

Description: Timestamp: 9/9/2015 7:03:23 PM

Message: Exception caught: Unexpected exception in McsProvider

An exception occurred during a WebClient request.

Error creating the Web Proxy specified in the 'system.net/defaultProxy' configuration section.

The parameter is incorrect

. StackTrace at Mitchell1.DPR.BCS.MCSProvider.McsProvider.SendToServer[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.MakeRestCallNoResult[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.UploadInstrumentation(IEnumerable`1 messages)

Category: Error

Priority: -1

EventId: 0

Severity: Error

Title:

Machine: MAIN

App Domain: Mitchell1.DPR.BCS.exe

ProcessId: 2440

Process Name: C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.BCS.exe

Thread Name:

Win32 ThreadId:8364

Extended Properties:

Error: (09/09/2015 02:03:17 PM) (Source: Mitchell1.DPR.BCS) (EventID: 0) (User: )

Description: Timestamp: 9/9/2015 7:03:17 PM

Message: Exception caught: Unexpected exception in McsProvider

An exception occurred during a WebClient request.

Error creating the Web Proxy specified in the 'system.net/defaultProxy' configuration section.

The parameter is incorrect

. StackTrace at Mitchell1.DPR.BCS.MCSProvider.McsProvider.SendToServer[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.MakeRestCall[TResult,TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.CheckingIn()

at Mitchell1.DPR.BCS.BcsService.CheckInCallback(Object state)

Category: Error

Priority: -1

EventId: 0

Severity: Error

Title:

Machine: MAIN

App Domain: Mitchell1.DPR.BCS.exe

ProcessId: 2440

Process Name: C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.BCS.exe

Thread Name:

Win32 ThreadId:8364

Extended Properties:

Error: (09/09/2015 02:03:17 PM) (Source: Mitchell1.DPR.BCS) (EventID: 0) (User: )

Description: Timestamp: 9/9/2015 7:03:17 PM

Message: Exception caught: Unexpected exception in McsProvider

An exception occurred during a WebClient request.

Error creating the Web Proxy specified in the 'system.net/defaultProxy' configuration section.

The parameter is incorrect

. StackTrace at Mitchell1.DPR.BCS.MCSProvider.McsProvider.SendToServer[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.MakeRestCall[TResult,TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.CheckingIn()

Category: Error

Priority: -1

EventId: 0

Severity: Error

Title:

Machine: MAIN

App Domain: Mitchell1.DPR.BCS.exe

ProcessId: 2440

Process Name: C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.BCS.exe

Thread Name:

Win32 ThreadId:8364

Extended Properties:

Error: (09/09/2015 01:58:17 PM) (Source: Mitchell1.DPR.BCS) (EventID: 0) (User: )

Description: Timestamp: 9/9/2015 6:58:17 PM

Message: Exception caught: Unexpected exception in McsProvider

An exception occurred during a WebClient request.

Error creating the Web Proxy specified in the 'system.net/defaultProxy' configuration section.

The parameter is incorrect

. StackTrace at Mitchell1.DPR.BCS.MCSProvider.McsProvider.SendToServer[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.MakeRestCallNoResult[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.UploadInstrumentation(IEnumerable`1 messages)

at Mitchell1.DPR.BCS.BcsService.BackupAgent.UploadAndPurgeLogs()

Category: Error

Priority: -1

EventId: 0

Severity: Error

Title:

Machine: MAIN

App Domain: Mitchell1.DPR.BCS.exe

ProcessId: 2440

Process Name: C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.BCS.exe

Thread Name:

Win32 ThreadId:2476

Extended Properties:

Error: (09/09/2015 01:58:17 PM) (Source: Mitchell1.DPR.BCS) (EventID: 0) (User: )

Description: Timestamp: 9/9/2015 6:58:17 PM

Message: Exception caught: Unexpected exception in McsProvider

An exception occurred during a WebClient request.

Error creating the Web Proxy specified in the 'system.net/defaultProxy' configuration section.

The parameter is incorrect

. StackTrace at Mitchell1.DPR.BCS.MCSProvider.McsProvider.SendToServer[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.MakeRestCallNoResult[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.UploadInstrumentation(IEnumerable`1 messages)

Category: Error

Priority: -1

EventId: 0

Severity: Error

Title:

Machine: MAIN

App Domain: Mitchell1.DPR.BCS.exe

ProcessId: 2440

Process Name: C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.BCS.exe

Thread Name:

Win32 ThreadId:2476

Extended Properties:

Error: (09/09/2015 01:58:11 PM) (Source: Mitchell1.DPR.BCS) (EventID: 0) (User: )

Description: Timestamp: 9/9/2015 6:58:11 PM

Message: Exception caught: Unexpected exception in McsProvider

An exception occurred during a WebClient request.

Error creating the Web Proxy specified in the 'system.net/defaultProxy' configuration section.

The parameter is incorrect

. StackTrace at Mitchell1.DPR.BCS.MCSProvider.McsProvider.SendToServer[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.MakeRestCall[TResult,TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.CheckingIn()

at Mitchell1.DPR.BCS.BcsService.CheckInCallback(Object state)

Category: Error

Priority: -1

EventId: 0

Severity: Error

Title:

Machine: MAIN

App Domain: Mitchell1.DPR.BCS.exe

ProcessId: 2440

Process Name: C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.BCS.exe

Thread Name:

Win32 ThreadId:2476

Extended Properties:

Error: (09/09/2015 01:58:11 PM) (Source: Mitchell1.DPR.BCS) (EventID: 0) (User: )

Description: Timestamp: 9/9/2015 6:58:11 PM

Message: Exception caught: Unexpected exception in McsProvider

An exception occurred during a WebClient request.

Error creating the Web Proxy specified in the 'system.net/defaultProxy' configuration section.

The parameter is incorrect

. StackTrace at Mitchell1.DPR.BCS.MCSProvider.McsProvider.SendToServer[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.MakeRestCall[TResult,TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.CheckingIn()

Category: Error

Priority: -1

EventId: 0

Severity: Error

Title:

Machine: MAIN

App Domain: Mitchell1.DPR.BCS.exe

ProcessId: 2440

Process Name: C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.BCS.exe

Thread Name:

Win32 ThreadId:2476

Extended Properties:

Error: (09/09/2015 01:53:11 PM) (Source: Mitchell1.DPR.BCS) (EventID: 0) (User: )

Description: Timestamp: 9/9/2015 6:53:11 PM

Message: Exception caught: Unexpected exception in McsProvider

An exception occurred during a WebClient request.

Error creating the Web Proxy specified in the 'system.net/defaultProxy' configuration section.

The parameter is incorrect

. StackTrace at Mitchell1.DPR.BCS.MCSProvider.McsProvider.SendToServer[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.MakeRestCallNoResult[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.UploadInstrumentation(IEnumerable`1 messages)

at Mitchell1.DPR.BCS.BcsService.BackupAgent.UploadAndPurgeLogs()

Category: Error

Priority: -1

EventId: 0

Severity: Error

Title:

Machine: MAIN

App Domain: Mitchell1.DPR.BCS.exe

ProcessId: 2440

Process Name: C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.BCS.exe

Thread Name:

Win32 ThreadId:2476

Extended Properties:

Error: (09/09/2015 01:53:11 PM) (Source: Mitchell1.DPR.BCS) (EventID: 0) (User: )

Description: Timestamp: 9/9/2015 6:53:11 PM

Message: Exception caught: Unexpected exception in McsProvider

An exception occurred during a WebClient request.

Error creating the Web Proxy specified in the 'system.net/defaultProxy' configuration section.

The parameter is incorrect

. StackTrace at Mitchell1.DPR.BCS.MCSProvider.McsProvider.SendToServer[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.MakeRestCallNoResult[TPostData](String methodName, RestAction action, TPostData postData, Boolean serializeBeforePosting)

at Mitchell1.DPR.BCS.MCSProvider.McsProvider.UploadInstrumentation(IEnumerable`1 messages)

Category: Error

Priority: -1

EventId: 0

Severity: Error

Title:

Machine: MAIN

App Domain: Mitchell1.DPR.BCS.exe

ProcessId: 2440

Process Name: C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.BCS.exe

Thread Name:

Win32 ThreadId:2476

Extended Properties:

System errors:

=============

Error: (09/08/2015 11:31:34 AM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WMPNetworkSvc service.

Error: (09/08/2015 11:31:04 AM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WMPNetworkSvc service.

Error: (09/08/2015 11:26:58 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED}

Error: (09/08/2015 11:26:57 AM) (Source: WMPNetworkSvc) (EventID: 14348) (User: )

Description: 0x80070057

Error: (09/08/2015 11:26:57 AM) (Source: WMPNetworkSvc) (EventID: 14323) (User: )

Description: WMPNetworkSvc0xc00d4268

Error: (09/08/2015 11:26:57 AM) (Source: WMPNetworkSvc) (EventID: 14348) (User: )

Description: 0x80070057

Error: (09/08/2015 11:26:57 AM) (Source: WMPNetworkSvc) (EventID: 14323) (User: )

Description: WMPNetworkSvc0xc00d4268

Error: (09/08/2015 11:26:57 AM) (Source: WMPNetworkSvc) (EventID: 14356) (User: )

Description: 0x80070057

Error: (09/08/2015 11:26:57 AM) (Source: WMPNetworkSvc) (EventID: 14323) (User: )

Description: WMPNetworkSvc0xc00d4268

Error: (09/08/2015 11:26:57 AM) (Source: WMPNetworkSvc) (EventID: 14323) (User: )

Description: WMPNetworkSvc0xc00d4268

Microsoft Office:

=========================

Error: (10/30/2013 06:18:29 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 89116 seconds with 1860 seconds of active time. This session ended with a crash.

Error: (10/23/2013 07:56:57 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 95062 seconds with 3960 seconds of active time. This session ended with a crash.

Error: (10/18/2013 06:15:01 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 2776 seconds with 240 seconds of active time. This session ended with a crash.

Error: (10/17/2013 06:17:14 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 86401 seconds with 1200 seconds of active time. This session ended with a crash.

Error: (10/16/2013 06:16:57 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 39 seconds with 0 seconds of active time. This session ended with a crash.

Error: (10/16/2013 06:16:09 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 86517 seconds with 1680 seconds of active time. This session ended with a crash.

Error: (10/15/2013 06:14:05 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 2585 seconds with 420 seconds of active time. This session ended with a crash.

Error: (10/14/2013 06:14:59 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 2525 seconds with 300 seconds of active time. This session ended with a crash.

Error: (10/10/2013 06:14:26 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 117 seconds with 60 seconds of active time. This session ended with a crash.

Error: (10/10/2013 06:12:13 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 175092 seconds with 10380 seconds of active time. This session ended with a crash.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz

Percentage of memory in use: 69%

Total physical RAM: 8161.35 MB

Available physical RAM: 2507.81 MB

Total Virtual: 16320.9 MB

Available Virtual: 9687.77 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:1859.57 GB) (Free:1744.93 GB) NTFS

Drive d: (2929 0139 05) (CDROM) (Total:0.63 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: AFF19826)

Partition 1: (Active) - (Size=3.4 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=1859.6 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

ken545

Post #2September 11, 2015, 7:09 PM UTC

nvtray.exe is a legit file but it may not be needed, but lets run some programs and see if anything bad comes up

speedDIAL.exe, <– Do you use this, the reviews are mixed, if you dont you can uninstall it via Programs and Features in the Control Panel

WORLDPAC speedDIAL (HKLM-x32\…\WORLDPAC speedDIAL_is1) (Version: - WORLDPAC)

-AdwCleaner-by Xplode

Click on this link to download : ADWCleaner TO YOUR DESKTOP

Click on ONE of the Two Blue Download Now buttons That have a blue arrow beside them and save it to your desktop.

Use my link only, do not do a search for AdwCleaner as there is a bogus copy going around by scammers

Do not click on any links in the top Advertisment.

[external image: AdwCleaner4.201_zpsxrbk2llq.jpg]

Close all open programs and internet browsers.

Double click on AdwCleaner.exe to run the tool.

Click on Scan.

After the scan is complete click on "Clean"

Confirm each time with Ok.

Your computer will be rebooted automatically. A text file will open after the restart.

Please post the content of that logfile with your next reply.

You can find the logfile at C:\AdwCleaner[S1].txt as well.

===============================================================================

[external image: thisisujrt.gif] Please download Junkware Removal Tool TO YOUR DESKTOP

Download the one from Bleeping Computer

Shut down your protection software now to avoid potential conflicts.

Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".

The tool will open and start scanning your system.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

Post the contents of JRT.txt into your next message.

===============================================================================

Download Malwarebytes' Anti-Malware TO YOUR DESKTOP

Windows XP : Double click on the icon to run it.

Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"

[external image: 0841859c-1a35-4dbd-b41a-e720629e3e22_zps]

On the Dashboard click on Update Now

Go to the Setting Tab

Under Setting go to Detection and Protection

Under PUP and PUM make sure both are set to show Treat Detections as Malware

Go to Advanced setting and make sure Automatically Quarantine Detected Items is checked

Then on the Dashboard click on Scan

Make sure to select THREAT SCAN

Then click on Scan

When the scan is finished on the bottom right click on SAVE RESULTS then select Copy to Clipboard

Please paste the log back into this thread for review

Exit Malwarebytes

Hoffmanns

Post #3September 11, 2015, 8:14 PM UTC

1. done

2.JRT.exe is not a valid win32 application?? I downloaded the one you said as i don't need any more issues

3. done

# AdwCleaner v5.007 - Logfile created 11/09/2015 at 14:25:44

# Updated 08/09/2015 by Xplode

# Database : 2015-09-10.1 [Server]

# Operating system : Windows 7 Professional Service Pack 1 (x64)

# Username : User - MAIN

# Running from : C:\Users\User\Desktop\AdwCleaner.exe

# Option : Scan

# Support : http://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

Folder Found : C:\ProgramData\Updater

***** [ Files ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

Key Found : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}

Key Found : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}

Key Found : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}

Key Found : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}

Key Found : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}

Key Found : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}

Key Found : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}

Key Found : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}

Key Found : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}

Key Found : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}

Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}

Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}

Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}

Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}

Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}

Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}

Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}

Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}

Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}

Key Found : HKCU\Software\AppDataLow\Software\adawarebp

Key Found : HKLM\SOFTWARE\Description

Key Found : HKU\S-1-5-21-17798994-207464888-438797339-1000\Software\AppDataLow\Software\adawarebp

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BDF61FAE-9D19-40F0-8F34-688DEB334CA9}

Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BDF61FAE-9D19-40F0-8F34-688DEB334CA9}

Key Found : HKU\S-1-5-21-17798994-207464888-438797339-1000\Software\Microsoft\Internet Explorer\SearchScopes\{BDF61FAE-9D19-40F0-8F34-688DEB334CA9}

***** [ Web browsers ] *****

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2760 bytes] ##########

Malwarebytes Anti-Malware

www.malwarebytes.org

Scan Date: 9/11/2015

Scan Time: 2:39 PM

Logfile:

Administrator: Yes

Version: 2.1.8.1057

Malware Database: v2015.09.11.06

Rootkit Database: v2015.08.16.01

License: Trial

Malware Protection: Enabled

Malicious Website Protection: Enabled

Self-protection: Disabled

OS: Windows 7 Service Pack 1

CPU: x64

File System: NTFS

User: User

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 598135

Time Elapsed: 18 min, 2 sec

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

Processes: 0

(No malicious items detected)

Modules: 0

(No malicious items detected)

Registry Keys: 0

(No malicious items detected)

Registry Values: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Folders: 0

(No malicious items detected)

Files: 0

(No malicious items detected)

Physical Sectors: 0

(No malicious items detected)

(end)

Malwarebytes Anti-Malware

www.malwarebytes.org

Protection, 9/11/2015 2:39 PM, SYSTEM, MAIN, Protection, Malware Protection, Starting,

Protection, 9/11/2015 2:39 PM, SYSTEM, MAIN, Protection, Malware Protection, Started,

Protection, 9/11/2015 2:39 PM, SYSTEM, MAIN, Protection, Malicious Website Protection, Starting,

Protection, 9/11/2015 2:39 PM, SYSTEM, MAIN, Protection, Malicious Website Protection, Started,

Error, 9/11/2015 2:39 PM, SYSTEM, MAIN, Update, Bad md5 or size: akadomains, 11,

Error, 9/11/2015 2:39 PM, SYSTEM, MAIN, Update, Bad md5 or size: akaips, 11,

Update, 9/11/2015 2:39 PM, SYSTEM, MAIN, Manual, Remediation Database, 2015.5.13.1, 2015.9.11.1,

Update, 9/11/2015 2:39 PM, SYSTEM, MAIN, Manual, Rootkit Database, 2015.6.2.1, 2015.8.16.1,

Update, 9/11/2015 2:39 PM, SYSTEM, MAIN, Manual, AKA IP Database, 0.0.0.0, 2015.9.11.1,

Update, 9/11/2015 2:39 PM, SYSTEM, MAIN, Manual, AKA Domain Database, 0.0.0.0, 2015.9.11.1,

Update, 9/11/2015 2:39 PM, SYSTEM, MAIN, Manual, Domain Database, 0.0.0.0, 2015.9.11.8,

Update, 9/11/2015 2:39 PM, SYSTEM, MAIN, Manual, IP Database, 0.0.0.0, 2015.9.11.5,

Update, 9/11/2015 2:39 PM, SYSTEM, MAIN, Manual, Malware Database, 2015.6.3.3, 2015.9.11.6,

Protection, 9/11/2015 2:39 PM, SYSTEM, MAIN, Protection, Refresh, Starting,

Protection, 9/11/2015 2:39 PM, SYSTEM, MAIN, Protection, Malicious Website Protection, Stopping,

Protection, 9/11/2015 2:39 PM, SYSTEM, MAIN, Protection, Malicious Website Protection, Stopped,

Protection, 9/11/2015 2:39 PM, SYSTEM, MAIN, Protection, Refresh, Success,

Protection, 9/11/2015 2:39 PM, SYSTEM, MAIN, Protection, Malicious Website Protection, Starting,

Protection, 9/11/2015 2:40 PM, SYSTEM, MAIN, Protection, Malicious Website Protection, Started,

Scan, 9/11/2015 2:57 PM, SYSTEM, MAIN, Manual, Start:9/11/2015 2:39 PM, Duration:18 min 2 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections,

(end)

ken545

Post #4September 11, 2015, 8:49 PM UTC last edited September 11, 2015, 8:52 PM UTC

JRT is a nice tool, go ahead and run it. Drag the one you have now to the trash and redownload it and give it another try. With Win 7 you will have to Right Click on it and RUN AS ADMINISTRATOR. If you downloaded from Bleeping Computer this time try the authors site

When you ran AdwCleaner it shows that it was just a scan, did you have it clean what it found ??

[external image: thisisujrt.gif] Please download Junkware Removal Tool TO YOUR DESKTOP

Download the one from Bleeping Computer

Shut down your protection software now to avoid potential conflicts.

Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".

The tool will open and start scanning your system.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

Post the contents of JRT.txt into your next message.

Hoffmanns

Post #5September 14, 2015, 2:34 PM UTC last edited September 14, 2015, 2:58 PM UTC

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 7.6.1 (09.08.2015:1)

OS: Windows 7 Professional x64

Ran by [removed] on Mon 09/14/2015 at 9:28:13.00

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Tasks

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer

~~~ Files

~~~ Folders

Failed to delete: [Folder] C:\Program Files (x86)\lavasoft\web companion

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{0071B02A-8988-4056-A691-96D8D9F27AE1}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{01ADF637-EA95-4BB4-AA64-F129D3007AE3}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{113ABF5B-7B41-4527-9FF8-968EB8438C04}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{1B04847C-AF1E-4B20-8AC1-29381058DF05}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{1E8B5178-EF23-44AC-8D69-CAE811C4D206}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{287C2923-6571-4B8A-8BC4-D2348FAA67A8}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{2990458E-41A6-46DD-B9F6-28E41A6FFF27}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{31165329-103C-4450-8381-47D4A9634626}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{34537597-D376-4C98-9B54-562794A8E3F0}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{3470DB20-13F5-4BEF-A2BA-93869435275D}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{4C8F2CC4-86F1-4C7E-99F6-B3BF8DF6F499}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{51DD4B29-BC34-4C11-971E-81552A9CAF80}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{531D2557-F297-4A85-9EE4-9D380A71C1D9}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{587939FE-EA60-4B6A-8663-E884E933ACF3}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{5D7BCD63-590B-47C8-817F-9B49547ABDD7}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{6F9888D7-5693-4332-875D-26795AC592F9}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{70FB0D28-146D-4921-AD9E-FF73A9FBA481}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{7184A707-8515-411C-B4C1-DF60EACF488B}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{719E5661-B239-40BD-BCE6-2499299B4734}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{7202E558-3FDD-4BF2-8AA6-A5FE7F7DBE43}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{77E3CBFD-462B-4E87-9277-2087632DB462}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{84E56662-A186-429B-B673-3A4968FBA36D}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{9348C924-A488-4F2C-A9F6-931725E55AAF}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{A856FC00-E6B6-4D35-A26D-B9904E0A7E59}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{A90EA304-37E7-456B-AB76-A6E15888020B}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{BF6C027C-49EC-42B2-952B-A46D2B3821C2}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{C3F98854-4A1D-4BFE-890B-A73B861C6A1D}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{C73FA9DA-0F26-4317-820D-9F79A91BFCE2}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{CF9A9A83-0A9E-4050-A408-745EC0E033BC}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{D2772264-8007-406E-B583-6EEB6E73E523}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{D805B2C2-B46E-459E-A1CD-9F96EDFA5551}

Successfully deleted: [Empty Folder] C:\Users\User\Appdata\Local\{FF60A4B1-75D3-416F-846E-951A5B796927}

Successfully deleted: [Folder] C:\ProgramData\lavasoft\web companion

Successfully deleted: [Folder] C:\Users\User\AppData\Roaming\lavasoft\web companion

~~~ Chrome

[C:\Users\User\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\User\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\User\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\User\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:

[]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Mon 09/14/2015 at 9:31:44.36

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

ken545

Post #6September 14, 2015, 2:59 PM UTC last edited September 14, 2015, 2:59 PM UTC

Keep in mind that I am on a computer most likely very far from you, I am not sitting down in a chair right next to you, your my eyes and ears as far as your system goes, if you dont answer questions I might ask it makes if very hard to help you

speedDIAL.exe, <– Do you use this, the reviews are mixed, if you dont you can uninstall it via Programs and Features in the Control Panel

WORLDPAC speedDIAL (HKLM-x32\…\WORLDPAC speedDIAL_is1) (Version: - WORLDPAC)

When you ran AdwCleaner it shows that it was just a scan, did you have it clean what it found ??

Hoffmanns

Post #7September 14, 2015, 4:08 PM UTC

didn't see those questions -

- I do use that Speed dial on a regular basis.

- Sorry you said you wanted the file titled - C:\AdwCleaner[S1].txt Didn't know you wanted the C1 file as well.

I posted the file below

# AdwCleaner v5.007 - Logfile created 11/09/2015 at 14:29:49

# Updated 08/09/2015 by Xplode

# Database : 2015-09-10.1 [Server]

# Operating system : Windows 7 Professional Service Pack 1 (x64)

# Username : User - MAIN

# Running from : C:\Users\User\Desktop\AdwCleaner.exe

# Option : Cleaning

# Support : http://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

[-] Folder Deleted : C:\ProgramData\Updater

***** [ Files ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}

[-] Key Deleted : HKCU\Software\AppDataLow\Software\adawarebp

[-] Key Deleted : HKLM\SOFTWARE\Description

[!] Key Not Deleted : HKU\S-1-5-21-17798994-207464888-438797339-1000\Software\AppDataLow\Software\adawarebp

[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BDF61FAE-9D19-40F0-8F34-688DEB334CA9}

[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BDF61FAE-9D19-40F0-8F34-688DEB334CA9}

[!] Key Not Deleted : HKU\S-1-5-21-17798994-207464888-438797339-1000\Software\Microsoft\Internet Explorer\SearchScopes\{BDF61FAE-9D19-40F0-8F34-688DEB334CA9}

***** [ Web browsers ] *****

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2992 bytes] ##########

ken545

Post #8September 14, 2015, 4:12 PM UTC

Good,

Go ahead and open FRST, make sure to put a checkmark in Additions, run and new scan and post both new logs please

Hoffmanns

Post #9September 15, 2015, 2:20 PM UTC

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:14-09-2015

Ran by [removed] (administrator) on MAIN (15-09-2015 08:20:08)

Running from C:\Users\[removed]\Desktop\New folder

[removed]

Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe

(Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe

(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(Lavasoft Limited) C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\ramaint.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Mitchell Repair Information Company, LLC) C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.ABS.exe

(Mitchell Repair Information Company, LLC) C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.BCS.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.SHOPSTREAM\MSSQL\Binn\sqlservr.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe

(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe

(RDM Corporation) C:\Windows\SysWOW64\RDMSOService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe

(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe

(Snap-on) C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\M1-SK.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NETGEAR Inc.) C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe

(The Scan Group, Inc.) C:\TSG\priscan\schtasks.exe

(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe

(brother) C:\Program Files (x86)\Brownie\BrStsW64.exe

(Mitchell Repair Information Company, LLC) C:\Program Files (x86)\Mitchell1\DataProtection\Mitchell1.DPR.BMA.exe

() C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\XChrgSrv.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\NETGEAR Genie\bin\genie2_tray.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

() C:\ProgramData\CAM Commerce Solutions\X-Charge\Application\XCSecurityService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(brother) C:\Program Files (x86)\Brownie\brpjp04a.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Snap-on) C:\Program Files (x86)\M1-SK\M1-SK Software Updater Host\FileSystemMonitorService.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE

() C:\Program Files (x86)\RSMarketingTools\service.exe

() C:\Program Files (x86)\RSMarketingTools\updater\updater.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Mitchell Repair Information Company, LLC.) C:\Program Files (x86)\M1-SK\Teamworks\ShopStreamXtShell.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE

(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe

(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe