PC, Internet, Docs, etc... Freezes [Closed]

Hello,

I original posted via (http://forums.whatthetech.com/index.php?showtopic=130083#entry871897) and member (ken545) responded, but unfortunatly I was not able to get back in time due to a close friend passing away.

I followed the info provided and had issues with aswMBR scanning my PC.  It either would start the scan and then give me the Blue Dealth Screen or it would freeze at a certain point and never finish scanning and I did try this in safe mode as well.  See attached of the report I was able to save when it froze.

I ran Farbar and attached the reports from that.

Thanks,

Matt

aswMBR INFO:

aswMBR version 1.0.1.2252 Copyright© 2014 AVAST Software
Run date: 2015-10-11 17:44:47
—————————–
17:44:47.052    OS Version: Windows 6.1.7601 Service Pack 1
17:44:47.052    Number of processors: 2 586 0x170A
17:44:47.057    ComputerName: MATT-PC  UserName: Matt
17:45:31.030    Initialize success
17:45:39.484    VM: initialized successfully
17:45:39.485    VM: Intel CPU supported
17:45:45.681    VM: supported disk I/O storport.sys
17:45:48.885    AVAST engine defs: 15101100
17:45:57.232    Disk 0  \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
17:45:57.235    Disk 0 Vendor: WDC_WD3200AAJB-00J3A0 01.03E01 Size: 305245MB BusType: 3
17:45:57.241    Disk 1  \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T1L0-2
17:45:57.245    Disk 1 Vendor: ST380215A 3.AAD Size: 76319MB BusType: 3
17:45:57.250    Disk 2 (boot) \Device\Harddisk2\DR2 -> \Device\00000071
17:45:57.253    Disk 2 Vendor: WDC_WD50 01.0 Size: 476940MB BusType: 3
17:45:57.500    VM: Disk 2 MBR read successfully
17:45:57.504    Disk 2 MBR scan
17:45:57.582    Disk 2 Windows XP default MBR code
17:45:57.587    Disk 2 Partition 1 80 (A) 07    HPFS/NTFS NTFS       476937 MB offset 63
17:45:57.595    Disk 2 default boot code
17:45:57.670    Disk 2 scanning sectors +976768384
17:45:57.773    Disk 2 scanning C:\windows\system32\drivers
17:46:13.719    Service scanning
17:46:37.352    Modules scanning
17:46:37.359    Disk 2 trace - called modules:
17:46:37.366    
17:46:38.106    AVAST engine scan C:\windows
17:46:40.484    AVAST engine scan C:\windows\system32
17:49:33.945    AVAST engine scan C:\windows\system32\drivers
17:49:58.303    AVAST engine scan C:\Users\Matt
18:04:07.802    AVAST engine scan C:\ProgramData
18:48:48.525    Disk 2 MBR has been saved successfully to "C:\Users\Matt\Desktop\MBR.dat"
18:48:48.527    The log file has been saved successfully to "C:\Users\Matt\Desktop\aswMBR.txt"

 

FRST INFO:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:04-10-2015
Ran by [removed] (administrator) on MATT-PC (06-10-2015 23:15:26)
Running from C:\Users\[removed]\Desktop
[removed] Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Safe Mode (minimal)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)



==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-09-20] (AVAST Software)
HKLM\…\Run: [Dropbox] => C:\Program Files\Dropbox\Client\Dropbox.exe [36710768 2015-10-01] (Dropbox, Inc.)
HKLM\…\Run: [NETGEAR USB Control Center] => C:\Program Files\NETGEAR\USB Control Center\Control Center.exe [4114944 2013-07-29] ()
HKLM\…\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-17] (NVIDIA Corporation)
HKLM\…\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
HKLM\…\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [2312824 2015-08-25] (Logitech, Inc.)
HKLM\…\Run: [EaseUS EPM tray] => C:\Program Files\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe [2089056 2015-09-16] (CHENGDU YIWO Tech Development Co., Ltd)
HKLM\…\Run: [EaseUS EPM Tray Agent] => C:\Program Files\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\TrayTipAgentE.exe [255072 2014-11-18] ()
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2015-07-02] (Logitech, Inc.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKLM\…\Policies\Explorer: [MemCheckBoxInRunDlg] 1
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\…\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6495144 2015-09-16] (Piriform Ltd)
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\…\Run: [FileHippo.com] => C:\Program Files\FileHippo.com\FileHippo.AppManager.exe [2926800 2015-01-27] ()
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\…\Run: [Spybot-S&D; Cleaning] => C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\…\Run: [WinPatrol] => C:\Program Files\Ruiware\WinPatrol\winpatrol.exe [1216648 2015-07-26] (Ruiware)
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\…\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\…\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [57981568 2015-09-28] (Skype Technologies S.A.)
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\…\Run: [NETGEARGenie] => C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe [602880 2015-06-01] (NETGEAR Inc.)
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\PhotoScreensaver.scr [413696 2010-11-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-09-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-09-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-09-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-09-20] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass FF RunOnce.lnk [2015-03-29]
ShortcutTarget: Install LastPass FF RunOnce.lnk -> C:\Program Files\Common Files\lpuninstall.exe (LastPass)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk [2015-03-29]
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files\Common Files\lpuninstall.exe (LastPass)
BootExecute: autocheck autochk * sdnclean.exe
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [S-1-5-21-1872680271-189780992-2905560188-1000] => Proxy is enabled.
ProxyServer: [S-1-5-21-1872680271-189780992-2905560188-1000] => localhost:21320
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{06795FB0-A82F-4D15-A7A5-DB9A34191B5F}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{06795FB0-A82F-4D15-A7A5-DB9A34191B5F}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.yahoo.com?fr=hp-avast&type;=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.yahoo.com/yhs/search?type=avastbcl&hspart;=avast&hsimp;=yhs-001&p;={searchTerms}
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://sports.yahoo.com/
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.yahoo.com?fr=hp-avast&type;=avastbcl
SearchScopes: HKLM -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://search.yahoo.com/yhs/search?type=avastbcl&hspart;=avast&hsimp;=yhs-001&p;={searchTerms}
SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL =
SearchScopes: HKLM -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://search.yahoo.com/yhs/search?type=avastbcl&hspart;=avast&hsimp;=yhs-001&p;={searchTerms}
SearchScopes: HKU\S-1-5-21-1872680271-189780992-2905560188-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1872680271-189780992-2905560188-1000 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL =
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-20] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-03] (AVAST Software)
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files\LastPass\LPToolbar.dll [2015-03-29] (LastPass)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-25] (Logitech, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-09-11] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-09-11] (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-20] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files\LastPass\LPToolbar.dll [2015-03-29] (LastPass)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869
FF DefaultSearchEngine: Google
FF DefaultSearchEngine.US: Google
FF DefaultSearchUrl: hxxps://search.yahoo.com/yhs/search
FF SearchEngineOrder.1: Yahoo! (Avast)
FF SelectedSearchEngine: Astromenda
FF Homepage: hxxp://sports.yahoo.com/
FF Keyword.URL: hxxps://search.yahoo.com/yhs/search
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-21] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\windows\system32\Adobe\Director\np32dsw_1220162.dll [2015-08-31] (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-20] (Oracle Corporation)
FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files\LastPass\nplastpass.dll [2015-03-29] (LastPass)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-02-17] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-01-17] (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-17] (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-17] (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
FF user.js: detected! => C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\user.js [2014-09-30]
FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-09-23]
FF Extension: Xmarks - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-05-29]
FF Extension: LastPass - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-09-24]
FF Extension: OpenDownload² - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{210249CE-F888-11DD-B868-4CB456D89593} [2015-09-23]
FF Extension: AddThis - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{3e0e7d2a-070f-4a47-b019-91fe5385ba79} [2015-06-01]
FF Extension: Tweak Network - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{DAD0F81A-CF67-4eed-98D6-26F6E47274CA} [2015-05-29]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-03-26]
FF Extension: Cleanest Addon Manager - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-03-26]
FF Extension: Facebook Disconnect - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-03-26]
FF Extension: Ghostery - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-03-26]
FF Extension: Google search link fix - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-03-26]
FF Extension: Google Translator for Firefox - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-03-26]
FF Extension: Facebook Phishing Protector - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{023e9ca0-63f3-47b1-bcb2-9badf9d9ef28}.xpi [2015-03-26]
FF Extension: URL Fixer - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{0fa2149e-bb2c-4ac2-a8d3-479599819475}.xpi [2015-03-26]
FF Extension: Flagfox - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2015-03-26]
FF Extension: Ebates Cash Back - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{35d6291e-1d4b-f9b4-c52f-77e6410d1326}.xpi [2015-07-31]
FF Extension: X-notifier - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{37fa1426-b82d-11db-8314-0800200c9a66}.xpi [2015-03-26]
FF Extension: NoScript - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-03-26]
FF Extension: YouTube High Definition - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}.xpi [2015-03-26]
FF Extension: Fasterfox - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi [2015-03-26]
FF Extension: Adblock Plus - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-03-26]
FF Extension: BetterPrivacy - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2015-03-26]
FF Extension: Tab Mix Plus - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2015-03-26]
FF Extension: DownThemAll! - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2015-03-26]
FF HKLM\…\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-09-15]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-19]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-04-07]

Chrome:
=======
CHR HomePage: Default -> hxxp://yahoo.com/
CHR StartupUrls: Default -> "hxxp://sports.yahoo.com/college-football/"
CHR DefaultSearchKeyword: Default -> lp
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.823\_platform_specific\win_x86\widevinecdmadapter.dll => No File
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\45.0.2454.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (AdobeAAMDetect) - C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll => No File
CHR Plugin: (Java Deployment Toolkit 8.0.600.27) - C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 8 U60) - C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (NPLastPass) - C:\Program Files\LastPass\nplastpass.dll (LastPass)
CHR Plugin: (Microsoft Office 2013) - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2013) - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Shockwave for Director) - C:\windows\system32\Adobe\Director\np32dsw_1219160.dll => No File
CHR Plugin: (Shockwave Flash) - C:\windows\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll => No File
CHR Profile: C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-26]
CHR Extension: (Xmarks Bookmark Sync) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajpgkpeckebdhofmmjfgcjjiiejpodla [2015-08-26]
CHR Extension: (Google Docs) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-26]
CHR Extension: (Google Drive) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-08-26]
CHR Extension: (YouTube) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-08-26]
CHR Extension: (Webmail Ad Blocker) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbhfdchmklhpcngcgjmpdbjakdggkkjp [2015-08-26]
CHR Extension: (Adblock Plus) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-08-26]
CHR Extension: (Ebates Cash Back) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\chhjbpecpncaggjpdakmflnfcopglcmi [2015-09-08]
CHR Extension: (Google Search) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-08-26]
CHR Extension: (Google+) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2015-08-26]
CHR Extension: (Google Sheets) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-26]
CHR Extension: (Google Docs Offline) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-04]
CHR Extension: (Avast Online Security) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-08-26]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2015-08-26]
CHR Extension: (Forecastfox) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihffmkcfkejomlfnilnmkokcpgclhfeg [2015-08-26]
CHR Extension: (Dropbox) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2015-08-26]
CHR Extension: (Grammarly Spell Checker & Grammar Checker) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2015-08-26]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-08-26]
CHR Extension: (InvisibleHand) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\lghjfnfolmcikomdjmoiemllfnlmmoko [2015-08-26]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-26]
CHR Extension: (Gmail) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-26]
CHR Extension: (Abstract-Blue) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnacehkknmafkjgkikclamogikoiaaa [2015-08-26]
CHR HKLM\…\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-09-12]
CHR HKLM\…\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-05]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-09-20] (AVAST Software)
S2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109008 2015-09-20] (AVAST Software)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3219136 2015-09-20] (Avast Software)
S2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe [1879640 2015-09-11] (Microsoft Corporation)
S2 dbupdate; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-09] (Dropbox, Inc.)
S2 dbupdatem; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-09] (Dropbox, Inc.)
S2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [370792 2010-01-21] ()
S2 GenieTimelineService; C:\Program Files\NETGEAR\ReadySHARE Vault\GenieTimelineService.exe [314944 2014-06-18] (Genie9)
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [921208 2015-08-17] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 NETGEARGenieDaemon; C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe [195840 2015-06-01] (NETGEAR)
S2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [167528 2010-01-21] ()
S2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-17] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4305016 2015-08-17] (NVIDIA Corporation)
S2 RosettaStoneLtdController; C:\Program Files\RosettaStoneLtdServices\RosettaStoneLtdController.exe [352312 2008-09-16] (Rosetta Stone Ltd.) [File not signed]
S2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-12-02] (DEVGURU Co., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S1 AsIO; C:\windows\System32\drivers\AsIO.sys [12400 2007-12-17] ()
S2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24016 2015-09-20] (AVAST Software)
R1 aswKbd; C:\windows\system32\drivers\aswKbd.sys [26096 2015-09-20] (AVAST Software)
S2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [76000 2015-09-20] (AVAST Software)
S0 aswNdisFlt; C:\windows\System32\DRIVERS\aswNdisFlt.sys [275856 2015-09-20] (AVAST Software)
S1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81728 2015-09-20] (AVAST Software)
S0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49776 2015-09-20] (AVAST Software)
S1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [789296 2015-09-20] (AVAST Software)
S1 aswSP; C:\windows\system32\drivers\aswSP.sys [434184 2015-09-20] (AVAST Software)
S2 aswStm; C:\windows\system32\drivers\aswStm.sys [115640 2015-09-20] (AVAST Software)
S3 epmntdrv; C:\windows\system32\epmntdrv.sys [15968 2014-11-18] ()
S3 EuGdiDrv; C:\windows\system32\EuGdiDrv.sys [10208 2014-11-18] ()
R3 LEqdUsb; C:\windows\System32\Drivers\LEqdUsb.Sys [52368 2015-06-17] (Logitech, Inc.)
R3 LHidEqd; C:\windows\System32\Drivers\LHidEqd.Sys [20240 2015-06-17] (Logitech, Inc.)
S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [51928 2015-06-18] (Malwarebytes Corporation)
R3 mcdbus; C:\windows\System32\DRIVERS\mcdbus.sys [116736 2009-02-24] (MagicISO, Inc.) [File not signed]
R3 MTsensor; C:\windows\System32\DRIVERS\ASACPI.sys [6504 2009-05-13] ()
R3 NetgearUDSMBus; C:\windows\System32\drivers\netgearUDSMBus.sys [112128 2013-07-25] (Windows (R) Codename Longhorn DDK provider)
S3 NetgearUDSTcpBus; C:\windows\System32\drivers\netgearUDSTcpBus.sys [176128 2013-07-25] (Windows (R) Codename Longhorn DDK provider)
R0 ngvss; C:\windows\system32\Drivers\ngvss.sys [107984 2015-09-20] (AVAST Software)
S2 NPF; C:\windows\system32\drivers\npf.sys [35088 2015-08-15] (CACE Technologies, Inc.)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18552 2015-08-17] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\windows\System32\drivers\nvvad32v.sys [44840 2015-08-11] (NVIDIA Corporation)
R0 pwdrvio; C:\windows\System32\pwdrvio.sys [17160 2015-03-05] ()
S3 pwdspio; C:\windows\system32\pwdspio.sys [13064 2015-03-05] ()
S2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-09-20] (Avast Software)
S3 aswVmm; \??\C:\Users\Matt\AppData\Local\Temp\aswVmm.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-13] (Microsoft Corporation)
U3 aswMBR; \??\C:\Users\Matt\AppData\Local\Temp\aswMBR.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-06 23:15 - 2015-10-06 23:15 - 00031199 _____ C:\Users\Matt\Desktop\FRST.txt
2015-10-06 23:15 - 2015-10-06 23:15 - 00000000 ____D C:\FRST
2015-10-06 21:33 - 2015-10-06 21:34 - 00160448 _____ C:\windows\Minidump\100615-32339-01.dmp
2015-10-06 21:28 - 2015-10-06 21:28 - 01697792 _____ (Farbar) C:\Users\Matt\Desktop\FRST.exe
2015-10-06 21:27 - 2015-10-06 21:28 - 05198336 _____ (AVAST Software) C:\Users\Matt\Desktop\aswMBR.exe
2015-10-06 21:27 - 2015-10-06 21:27 - 00000000 ____D C:\Users\Matt\AppData\Local\Adobe
2015-10-06 21:16 - 2015-10-06 21:33 - 437628987 _____ C:\windows\MEMORY.DMP
2015-10-02 18:17 - 2015-10-02 18:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-01 09:39 - 2015-10-01 09:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master 10.8
2015-10-01 09:39 - 2015-09-21 00:19 - 02658952 _____ C:\windows\system32\BootMan.exe
2015-10-01 09:39 - 2014-11-18 14:46 - 00021088 _____ C:\windows\system32\EuEpmGdi.dll
2015-10-01 09:39 - 2014-11-18 14:39 - 00015968 _____ C:\windows\system32\epmntdrv.sys
2015-10-01 09:39 - 2014-11-18 14:39 - 00010208 _____ C:\windows\system32\EuGdiDrv.sys
2015-10-01 09:39 - 2014-11-18 14:38 - 00088160 _____ C:\windows\system32\setupempdrv03.exe
2015-09-24 20:39 - 2015-09-24 20:39 - 00000000 ____D C:\Users\Matt\AppData\Roaming\CrystalIdea Software
2015-09-20 14:03 - 2015-09-20 14:03 - 00313472 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2015-09-20 14:03 - 2015-09-20 14:03 - 00043112 _____ (AVAST Software) C:\windows\avastSS.scr
2015-09-20 14:02 - 2015-09-20 14:02 - 00275856 _____ (AVAST Software) C:\windows\system32\Drivers\aswNdisFlt.sys
2015-09-17 02:23 - 2015-09-17 02:24 - 00000000 ____D C:\Program Files\GUM16ED.tmp
2015-09-15 11:30 - 2015-09-15 11:30 - 00000000 ____D C:\Users\Matt\AppData\Roaming\sp6_log

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-06 21:33 - 2014-06-23 05:52 - 00000000 ____D C:\windows\Minidump
2015-10-06 21:31 - 2015-01-29 20:23 - 00000000 ____D C:\Users\Matt\AppData\Roaming\Skype
2015-10-06 21:31 - 2009-07-14 00:34 - 00028016 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-06 21:31 - 2009-07-14 00:34 - 00028016 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-06 21:28 - 2015-08-26 11:12 - 00000886 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-06 21:27 - 2015-03-29 09:54 - 00000000 ____D C:\Users\Matt\AppData\LocalLow\LastPass
2015-10-06 21:27 - 2015-01-29 20:22 - 00000000 ____D C:\ProgramData\Skype
2015-10-06 21:26 - 2015-04-26 08:39 - 00000000 ____D C:\Users\Matt\AppData\Local\CrashDumps
2015-10-06 21:26 - 2015-01-23 17:51 - 02059173 ____N C:\windows\WindowsUpdate.log
2015-10-06 21:23 - 2015-08-30 19:51 - 00000000 ____D C:\Users\Matt\AppData\Roaming\Macromedia
2015-10-06 21:20 - 2015-08-15 17:04 - 00000000 ____D C:\Users\Matt\AppData\Local\NETGEARGenie
2015-10-06 21:20 - 2015-01-17 15:29 - 00098520 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-06 21:17 - 2015-08-26 11:11 - 00000882 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-06 21:16 - 2015-01-17 14:29 - 00000000 ____D C:\ProgramData\NVIDIA
2015-10-06 21:16 - 2014-05-29 21:26 - 00000000 _____ C:\windows\system32\Drivers\lvuvc.hs
2015-10-06 21:16 - 2009-07-14 00:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-10-06 20:46 - 2015-08-30 19:50 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-10-04 08:27 - 2015-02-17 17:46 - 00000000 ____D C:\Users\Matt\Downloads\Download Them All
2015-10-02 18:18 - 2015-07-15 17:00 - 00000000 ___RD C:\Users\Matt\Dropbox
2015-10-02 18:18 - 2015-07-15 16:55 - 00000000 ____D C:\Users\Matt\AppData\Local\Dropbox
2015-10-02 18:17 - 2015-06-09 16:25 - 00000000 ____D C:\Program Files\Dropbox
2015-10-01 17:30 - 2015-05-15 20:44 - 00041396 __RSH C:\ProgramData\ntuser.pol
2015-10-01 17:30 - 2015-01-23 22:18 - 00000000 ____D C:\Program Files\SpywareBlaster
2015-10-01 17:30 - 2015-01-17 13:44 - 00000000 ____D C:\ProgramData\TEMP
2015-10-01 16:32 - 2014-07-02 06:15 - 00000700 _____ C:\windows\wininit.ini
2015-10-01 09:39 - 2014-10-19 20:42 - 00000000 ____D C:\Program Files\EaseUS
2015-10-01 09:32 - 2015-08-28 06:46 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-09-25 18:49 - 2015-08-26 11:14 - 00000000 ____D C:\Users\Matt\AppData\Local\Google
2015-09-24 20:52 - 2015-01-23 21:53 - 00000000 ____D C:\Program Files\CCleaner
2015-09-24 19:50 - 2015-01-17 19:50 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-09-24 19:17 - 2009-07-13 22:37 - 00000000 ____D C:\windows\system32\NDF
2015-09-24 19:01 - 2009-07-14 00:53 - 00032598 _____ C:\windows\Tasks\SCHEDLGU.TXT
2015-09-24 18:43 - 2015-03-01 11:29 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-09-23 17:48 - 2015-03-01 11:29 - 00001098 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-09-21 17:46 - 2015-08-30 19:50 - 00780488 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2015-09-21 17:46 - 2015-08-30 19:50 - 00142536 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2015-09-20 14:05 - 2015-01-19 23:57 - 00002116 _____ C:\Users\Public\Desktop\Avast SafeZone.lnk
2015-09-20 14:03 - 2015-07-15 17:10 - 00107984 _____ (AVAST Software) C:\windows\system32\Drivers\ngvss.sys
2015-09-20 14:03 - 2015-01-19 23:56 - 00024016 _____ (AVAST Software) C:\windows\system32\Drivers\aswHwid.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00789296 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00434184 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00208664 _____ (AVAST Software) C:\windows\system32\Drivers\aswVmm.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00115640 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00081728 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00076000 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00049776 _____ (AVAST Software) C:\windows\system32\Drivers\aswRvrt.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00026096 _____ (AVAST Software) C:\windows\system32\Drivers\aswKbd.sys
2015-09-15 18:38 - 2015-01-01 11:14 - 00007647 _____ C:\Users\Matt\AppData\Local\resmon.resmoncfg
2015-09-15 18:28 - 2015-08-10 17:26 - 00430504 _____ C:\windows\system32\FNTCACHE.DAT
2015-09-15 11:31 - 2015-01-23 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2015-09-15 11:31 - 2015-01-19 20:16 - 00000000 ____D C:\ProgramData\LogiShrd
2015-09-15 11:31 - 2014-05-30 14:30 - 00000000 ____D C:\Program Files\Logitech
2015-09-15 11:31 - 2014-05-29 21:26 - 00000000 ____D C:\Program Files\Common Files\logishrd
2015-09-15 04:43 - 2009-07-13 22:37 - 00000000 ____D C:\windows\Microsoft.NET
2015-09-07 09:26 - 2009-07-13 22:04 - 00451779 ____R C:\windows\system32\Drivers\etc\hosts.20151001-093318.backup

==================== Files in the root of some directories =======

2014-05-29 21:48 - 2015-03-29 10:12 - 10468408 _____ (LastPass) C:\Program Files\Common Files\lpuninstall.exe
2014-12-29 15:22 - 2014-12-29 15:22 - 0160901 _____ () C:\Users\Matt\AppData\Local\ars.cache
2014-12-29 15:23 - 2014-12-29 15:23 - 0261211 _____ () C:\Users\Matt\AppData\Local\census.cache
2014-12-28 23:13 - 2014-12-28 23:13 - 0000036 _____ () C:\Users\Matt\AppData\Local\housecall.guid.cache
2015-01-01 11:14 - 2015-09-15 18:38 - 0007647 _____ () C:\Users\Matt\AppData\Local\resmon.resmoncfg
2014-12-29 15:10 - 2014-12-29 15:10 - 0000010 _____ () C:\Users\Matt\AppData\Local\sponge.last.runtime.cache
2015-01-23 20:02 - 2015-01-23 20:02 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Matt\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp3psr7n.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-10-01 00:37

==================== End of FRST.txt ============================

ADDITION INFO:

Additional scan result of Farbar Recovery Scan Tool (x86) Version:04-10-2015
Ran by [removed] (2015-10-06 23:16:09)
Running from C:\Users\[removed]\Desktop
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) (2014-05-30 01:21:36)
Boot Mode: Safe Mode (minimal)
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1872680271-189780992-2905560188-500 - Administrator - Disabled)
Guest (S-1-5-21-1872680271-189780992-2905560188-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1872680271-189780992-2905560188-1005 - Limited - Enabled)
Matt (S-1-5-21-1872680271-189780992-2905560188-1000 - Administrator - Enabled) => C:\Users\Matt

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat XI Pro (HKLM\…\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.09 - Adobe Systems)
Adobe Flash Player 19 ActiveX (HKLM\…\Adobe Flash Player ActiveX) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM\…\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM\…\Adobe Shockwave Player) (Version: 12.2.0.162 - Adobe Systems, Inc.)
Amazon Send to Kindle (HKLM\…\SendToKindle) (Version: 1.0.1.240 - Amazon)
Avast Internet Security (HKLM\…\Avast) (Version: 10.4.2233 - AVAST Software)
Bigasoft Total Video Converter 4.2.1.5186 (HKLM\…\{A72CE741-1F32-4D79-BFFB-A714375C678D}_is1) (Version:  - Bigasoft Corporation)
Brother MFL-Pro Suite MFC-7340 (HKLM\…\{46E1B1F2-A279-4356-9B17-029F9CC72EAE}) (Version: 1.0.1.0 - Brother Industries, Ltd.)
CameraHelperMsi (Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM\…\CCleaner) (Version: 5.10 - Piriform)
CleanMem (HKLM\…\CleanMem) (Version: v2.5.0 - PcWinTech.com)
CodeStuff Starter (HKLM\…\CodeStuff Starter) (Version: 5.6.2.9 - CodeStuff)
Cool & Quiet (HKLM\…\{1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}) (Version:  - )
Dropbox (HKLM\…\Dropbox) (Version: 3.10.7 - Dropbox, Inc.)
Dropbox Update Helper (Version: 1.3.27.33 - Dropbox, Inc.) Hidden
EaseUS Partition Master 10.8 (HKLM\…\EaseUS Partition Master_is1) (Version:  - EaseUS)
erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
FileHippo App Manager (HKLM\…\FileHippo.com) (Version:  - FileHippo.com)
Google Chrome (HKLM\…\Google Chrome) (Version: 45.0.2454.101 - Google Inc.)
Google Update Helper (Version: 1.3.28.15 - Google Inc.) Hidden
Internet Explorer (Enable DEP) (HKLM\…\{a9264802-8a7a-40fe-a135-5c6d204aed7a}.sdb) (Version:  - )
Java 8 Update 51 (HKLM\…\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Java 8 Update 60 (HKLM\…\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
LastPass (uninstall only) (HKLM\…\LastPass) (Version:  - LastPass)
Logitech Harmony Remote Software 7 (HKLM\…\{5C6F884D-680C-448B-B4C9-22296EE1B206}) (Version: 7.7.0.0 - Logitech)
Logitech SetPoint 6.67 (HKLM\…\sp6) (Version: 6.67.83 - Logitech)
Logitech Unifying Software 2.50 (HKLM\…\Logitech Unifying) (Version: 2.50.25 - Logitech)
Logitech Webcam Software (HKLM\…\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Magic ISO Maker v5.5 (build 0281) (HKLM\…\Magic ISO Maker v5.5 (build 0281)) (Version:  - )
MagicDisc 2.7.106 (HKLM\…\MagicDisc 2.7.106) (Version:  - )
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM\…\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\…\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM\…\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 - en-us (HKLM\…\ProPlusRetail - en-us) (Version: 15.0.4753.1003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\…\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\…\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
MiniTool Partition Wizard Free 9.1 (HKLM\…\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version:  - MiniTool Solution Ltd.)
Mozilla Firefox 41.0.1 (x86 en-US) (HKLM\…\Mozilla Firefox 41.0.1 (x86 en-US)) (Version: 41.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\…\MozillaMaintenanceService) (Version: 41.0 - Mozilla)
NETGEAR Genie (HKLM\…\NETGEAR Genie) (Version: 2.4.12.00 - NETGEAR Inc.)
NETGEAR USB Control Center   (HKLM\…\{A98ED5B6-8D40-4D1A-ADC5-86D45AD4F7AD}) (Version: 1.36 - NETGEAR)
NVIDIA 3D Vision Controller Driver 340.50 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 341.81 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.81 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\…\NVIDIA Drivers) (Version: 1.10.57.35 - NVIDIA Corporation)
NVIDIA ForceWare Network Access Manager (HKLM\…\{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}) (Version: 1.00.7325.0 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.5.13.6 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.13.6 - NVIDIA Corporation)
NVIDIA Graphics Driver 341.81 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.81 - NVIDIA Corporation)
NVIDIA PhysX (HKLM\…\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4753.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4753.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4753.1003 - Microsoft Corporation) Hidden
ReadySHARE Vault (HKLM\…\ReadySHARE Vault) (Version: 3.0 - Genie9)
Realtek High Definition Audio Driver (HKLM\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
Remote Control USB Driver (HKLM\…\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - )
Revo Uninstaller Pro 3.1.4 (HKLM\…\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.4 - VS Revo Group, Ltd.)
Rosetta Stone Ltd Services (HKLM\…\{2110AF8F-F6E9-4712-A185-1B839C60822E}) (Version: 2.2.1.1 - Rosetta Stone Ltd.)
Rosetta Stone Version 3 (HKLM\…\{99011A6E-5200-11DE-BDB8-7ACD56D89593}) (Version: 3.4.5.0 - Rosetta Stone Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\…\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.51.0 - SAMSUNG Electronics Co., Ltd.)
SDFormatter (HKLM\…\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association)
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.13.6 - NVIDIA Corporation) Hidden
Skype™ 7.12 (HKLM\…\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.12.101 - Skype Technologies S.A.)
Snagit 12 (HKLM\…\{e8720e7e-08a2-4a30-9bce-70aa27c2a3dc}) (Version: 12.2.2.2107 - TechSmith Corporation)
Snagit 12 (Version: 12.2.2 - TechSmith Corporation) Hidden
Spybot - Search & Destroy (HKLM\…\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
SpywareBlaster 5.2 (HKLM\…\SpywareBlaster_is1) (Version: 5.2.0 - BrightFort LLC)
swMSM (HKLM\…\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version:  - )
TeraCopy 2.3 (HKLM\…\TeraCopy_is1) (Version:  - Code Sector)
Tweaking.com - Simple System Tweaker (HKLM\…\Tweaking.com - Simple System Tweaker) (Version: 2.1.0 - Tweaking.com)
Tweaking.com - Windows Repair (All in One) (HKLM\…\Tweaking.com - Windows Repair (All in One)) (Version: 2.10.2 - Tweaking.com)
VLC media player (HKLM\…\VLC media player) (Version: 2.2.1 - VideoLAN)
WinPatrol (HKLM\…\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 33.6.2015.18 - Ruiware)
WinRAR 5.21 (32-bit) (HKLM\…\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

20-09-2015 14:01:10 avast! antivirus system restore point
20-09-2015 14:05:18 Device Driver Package Install: Avast Network Service
28-09-2015 00:00:05 Scheduled Checkpoint
06-10-2015 20:58:17 Revo Uninstaller Pro's restore point - µTorrent

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 22:04 - 2015-10-01 09:33 - 00451779 ____R C:\windows\system32\Drivers\etc\hosts
127.0.0.1    localhost
127.0.0.1    3dns.adobe.com 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com activate.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.wip.adobe.com
127.0.0.1    activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com adobe-dns-3.adobe.com adobe-dns-4.adobe.com
127.0.0.1    adobeereg.com practivate.adobe practivate.adobe.com practivate.adobe.newoa practivate.adobe.ntp practivate.adobe.ipp ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com
127.0.0.1    ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com
127.0.0.1    www.adobeereg.com wwis-dubc1-vip60.adobe.com www.wip.adobe.com www.wip1.adobe.com
127.0.0.1    www.wip2.adobe.com www.wip3.adobe.com www.wip4.adobe.com wwis-dubc1-vip60.adobe.com crl.verisign.net CRL.VERISIGN.NET ood.opsource.net
127.0.0.1    www.007guard.com
127.0.0.1    007guard.com
127.0.0.1    008i.com
127.0.0.1    www.008k.com
127.0.0.1    008k.com
127.0.0.1    www.00hq.com
127.0.0.1    00hq.com
127.0.0.1    010402.com
127.0.0.1    www.032439.com
127.0.0.1    032439.com
127.0.0.1    www.0scan.com
127.0.0.1    0scan.com
127.0.0.1    1000gratisproben.com
127.0.0.1    www.1000gratisproben.com
127.0.0.1    1001namen.com
127.0.0.1    www.1001namen.com
127.0.0.1    100888290cs.com
127.0.0.1    www.100888290cs.com
127.0.0.1    www.100sexlinks.com
127.0.0.1    100sexlinks.com
127.0.0.1    10sek.com
127.0.0.1    www.10sek.com

There are 1000 more lines.


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2A1AD197-BF7D-4F3B-8E2F-B1260E6C1EE4} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX86\OfficeC2RClient.exe [2015-09-11] (Microsoft Corporation)
Task: {2E5C3B8A-078B-4CA6-9773-ABC0362C39D7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-26] (Google Inc.)
Task: {4D043D53-7E16-4455-B031-C53B6F19BDC3} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {5180499B-DE87-4321-B4DD-344699D8AE2D} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX86\OfficeC2RClient.exe [2015-09-11] (Microsoft Corporation)
Task: {64D5A9C1-2A74-4B9E-9C44-4D0EB691B25B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-09-11] (Microsoft Corporation)
Task: {675CE470-7532-46FC-8BCE-8B83F5C4126A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-09-11] (Microsoft Corporation)
Task: {7155F3E1-20E4-4841-98D0-002D46674FD1} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {8ED4ADF4-DB19-4B54-8BE6-AD549D3DF3D4} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-09-20] (AVAST Software)
Task: {A620662F-76E1-41DD-8966-85777527353E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd)
Task: {AE10D29D-5A8A-4F46-9C4C-34D5D28F4061} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-26] (Google Inc.)
Task: {B4472C3B-E5CC-46A2-9399-76DCBCC34BA1} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {B86AE087-E0D7-46A8-AB64-96C7436F219E} - System32\Tasks\Clean System Memory => C:\Windows\system32\CleanMem.exe [2014-08-20] (PcWinTech.com)
Task: {C3BE0259-8857-4B32-A839-589D66629675} - System32\Tasks\{C5365236-E6D2-4A6E-9592-AD094E7DF4BE} => pcalua.exe -a "C:\Users\Matt\Downloads\– Misc Downloads\Brother Uninstall Tool.EXE" -d "C:\Users\Matt\Downloads\– Misc Downloads"
Task: {CBA26A4F-9542-4080-82BA-470727D9B719} - System32\Tasks\TechSmith Updater => C:\Program Files\Common Files\TechSmith Shared\Updater\TSCUpdClt.exe [2014-07-31] (TechSmith Corporation)
Task: {E049E9C9-7C2E-412E-A02B-1EE43DE59894} - System32\Tasks\{08CDCD08-D057-4200-B1B1-CFF277414693} => pcalua.exe -a C:\Users\Matt\AppData\Local\Temp\mozOpenDownload\jxpiinstall.exe -d C:\Users\Matt\AppData\Local\Temp\mozOpenDownload
Task: {E134E76D-93F1-45E7-B322-5D2078B6B3B6} - System32\Tasks\{3C299D02-2232-45CE-92EF-17D412EB9B7F} => Firefox.exe http://www.skype.com/go/downloading?source=lightinstaller&ver;=6.21.0.104&LastError;=12002
Task: {E17430FE-86A0-48B3-BDC3-234A679D06CC} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-21] (Adobe Systems Incorporated)
Task: {E4A09F84-5348-4BBD-8985-5ACA6CD94F5D} - System32\Tasks\{3A94318B-2138-42D8-BFDD-3252E91F2202} => Firefox.exe http://ui.skype.com/ui/0/7.1.0.105/en/abandoninstall?source=lightinstaller&page;=tsInstall
Task: {E79E8399-ED7D-4756-9E6F-17CC0F5F5E62} - System32\Tasks\CleanMem Mini Monitor => C:\Program Files\CleanMem\mini_monitor.exe [2014-08-20] (PcWinTech.com)
Task: {E927FCF3-E97D-447A-AA6C-EDD2B61F27A4} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-09-15 04:28 - 2015-08-11 20:57 - 08900672 _____ () C:\Program Files\Microsoft Office 15\root\Office15\1033\GrooveIntlResource.dll
2015-01-23 22:19 - 2012-01-20 15:55 - 00427520 _____ () C:\Program Files\TeraCopy\TeraCopyExt.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\…\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\…\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\…\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\…\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\…\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\…\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\…\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\…\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\…\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\…\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\…\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\…\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\…\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\…\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\…\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\…\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\…\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\…\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\…\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\…\123simsen.com -> www.123simsen.com

There are 12684 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1872680271-189780992-2905560188-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: Media is not connected to internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: GenieTimelineService => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Snagit 12.lnk => C:\windows\pss\Snagit 12.lnk.CommonStartup
MSCONFIG\startupreg: 38328050E8A58DA138857FE54AF6A87CC306830A._service_run => "C:\Program Files\Google\Chrome\Application\chrome.exe" –type=service
MSCONFIG\startupreg: EaseUS EPM tray => C:\Program Files\EaseUS\EaseUS Partition Master 10.5\bin\EpmNews.exe
MSCONFIG\startupreg: EaseUS EPM Tray Agent => "C:\Program Files\EaseUS\EaseUS Partition Master 10.5\bin\TrayPopupE\TrayTipAgentE.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{D96966A7-4168-48A0-8D7F-7B2A608821FC}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{6F8E5037-FBF4-4719-8B89-F5C6B6EA94EA}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{C498DFDC-EAFE-430F-BAF3-52C3CB1C9518}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [UDP Query User{8497657D-0A43-4DA7-BEF4-8E4535987EAF}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [{95D45295-63FC-4095-9E6E-93936050CDB5}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{94CC798F-C982-4AF8-8F28-661F468163D1}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [TCP Query User{1D928B61-9500-41FE-959D-4EB4CD188CAE}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [UDP Query User{DD2A251A-B4B3-481B-A1CA-18EC43E2BC5E}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [{978065BC-0373-45BF-BDC9-64F8DBF2B54C}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{3ACAB8E5-AAF6-4A81-B708-5DA3EA7F23E1}] => (Allow) LPort=8298
FirewallRules: [{01B3C5CA-4D96-441E-BB39-56537288A3B3}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{30FD7F73-82B7-4FFD-9CA6-DCE098FB8597}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{6DEA266F-4A64-4604-8A8C-6EB0B3431417}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{2AB10C20-5D42-4198-8D1D-2AE1FB496928}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{AE6096E5-34DF-4B06-9631-46D2DB101E8C}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{40926A57-F69F-4356-97C6-44CDE350DC5A}] => (Allow) C:\Program Files\Rosetta Stone\Rosetta Stone Version 3\RosettaStoneVersion3.exe
FirewallRules: [{5C631478-EDCE-44BE-B0B7-AE1511881EFA}] => (Allow) C:\Program Files\Rosetta Stone\Rosetta Stone Version 3\RosettaStoneVersion3.exe
FirewallRules: [{023C0160-644D-41B9-ADF0-43A5EAD31E5D}] => (Allow) C:\Program Files\Rosetta Stone\Rosetta Stone Version 3\support\bin\win\RosettaStoneLtdServices.exe
FirewallRules: [{4493C9E5-9AC4-4BD6-90BE-D21A73A620BD}] => (Allow) C:\Program Files\Rosetta Stone\Rosetta Stone Version 3\support\bin\win\RosettaStoneLtdServices.exe
FirewallRules: [TCP Query User{8C48A375-1855-4D22-BBEF-17D6BEE62C12}C:\program files\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files\netgear genie\bin\netgeargenie.exe
FirewallRules: [UDP Query User{9AEDBD9A-F645-43E8-84E1-B89A3253A68F}C:\program files\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files\netgear genie\bin\netgeargenie.exe
FirewallRules: [{15F5DA60-9166-4430-A42B-E0BCF476448F}] => (Allow) C:\program files\netgear genie\bin\netgeargenie.exe
FirewallRules: [{18380D54-E877-433C-8E04-38819362F034}] => (Allow) C:\program files\netgear genie\bin\netgeargenie.exe
FirewallRules: [{CF292C91-8B29-416D-A863-AD9871E84A44}] => (Allow) C:\Program Files\NETGEAR\USB Control Center\Control Center.exe
FirewallRules: [{DE40A55D-8BC3-4B85-B888-7546DB1F382E}] => (Allow) C:\Program Files\NETGEAR\USB Control Center\Control Center.exe
FirewallRules: [{122EF238-8B32-48F4-AF01-53F5C639C1BF}] => (Allow) LPort=7423
FirewallRules: [TCP Query User{D9F7E828-A4C7-408A-94E6-E69F8DF13193}C:\program files\netgear\usb control center\control center.exe] => (Allow) C:\program files\netgear\usb control center\control center.exe
FirewallRules: [UDP Query User{F2E081D4-8D4E-4334-B8C2-184DB558E6F3}C:\program files\netgear\usb control center\control center.exe] => (Allow) C:\program files\netgear\usb control center\control center.exe
FirewallRules: [{96DD9DAD-3E01-4F95-A114-12C0D6DDE0CF}] => (Allow) LPort=7423
FirewallRules: [{D3C78D99-FF13-4CF4-B7E5-FFA970308629}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{D3E4A018-1BE4-4203-B345-9024A907C75A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{8B08421A-AE12-4D49-95A9-2389FAB44E7D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{D1B4481D-7CC5-4622-B7C0-E104AB39FB22}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{411E6482-519F-4476-87C2-FE93CCE743A1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7AC3E791-61F1-4119-A0E2-C6A86DCCB642}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{B86A174C-8000-42DE-B536-1A0092613347}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{D4D8D48B-9A5F-45FB-B82A-D68C54C8FBDB}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{4D6C0E8E-C352-4D67-B008-3B8BC71482B3}] => (Allow) C:\Program Files\Dropbox\Client\Dropbox.exe
DomainProfile\AuthorizedApplications: [C:\Program Files\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D; 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D; 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D; 2 Background update service
StandardProfile\AuthorizedApplications: [C:\Program Files\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7

==================== Faulty Device Manager Devices =============

Name: avast! VM Monitor
Description: avast! VM Monitor
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: aswVmm
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Avast! Firewall Driver
Description: Avast! Firewall Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: aswNdisFlt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: avast! Revert
Description: avast! Revert
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: aswRvrt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/06/2015 09:13:25 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/06 21:13:25.724]: [00005828]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/06/2015 09:13:24 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/06 21:13:24.717]: [00005828]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/06/2015 09:13:23 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/06 21:13:23.711]: [00005828]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/06/2015 09:13:22 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/06 21:13:22.706]: [00005828]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/06/2015 09:13:21 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/06 21:13:21.700]: [00005828]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/06/2015 09:13:20 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/06 21:13:20.694]: [00005828]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/06/2015 09:13:19 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/06 21:13:19.688]: [00005828]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/06/2015 09:13:18 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/06 21:13:18.682]: [00005828]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/06/2015 09:13:17 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/06 21:13:17.668]: [00005828]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/06/2015 09:13:16 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/06 21:13:16.662]: [00005828]: CUsbScnDev: DeviceIoControl Illegal response


System errors:
=============
Error: (10/06/2015 10:03:44 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084NVSvc{DCAB0989-1301-4319-BE5F-ADE89F88581C}

Error: (10/06/2015 09:35:52 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The PnP-X IP Bus Enumerator service depends on the Function Discovery Provider Host service which failed to start because of the following error:
%%1068

Error: (10/06/2015 09:34:54 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
%%1068

Error: (10/06/2015 09:34:54 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
%%1068

Error: (10/06/2015 09:34:54 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
%%1068

Error: (10/06/2015 09:34:54 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
%%1068

Error: (10/06/2015 09:34:54 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
%%1068

Error: (10/06/2015 09:34:54 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
%%1068

Error: (10/06/2015 09:34:54 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
%%1068

Error: (10/06/2015 09:34:54 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
%%1068


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU E8400 @ 3.00GHz
Percentage of memory in use: 27%
Total physical RAM: 3326.55 MB
Available physical RAM: 2414.71 MB
Total Virtual: 6651.42 MB
Available Virtual: 5822.82 MB

==================== Drives ================================

Drive c: (Main Hard Drive) (Fixed) (Total:465.76 GB) (Free:215.93 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (Main Backup Drive) (Fixed) (Total:298.09 GB) (Free:219.42 GB) NTFS
Drive e: (Second Backup Drive) (Fixed) (Total:74.53 GB) (Free:15.14 GB) NTFS

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: 90999099)
Partition 1: (Active) - (Size=74.5 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: 189A1899)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Hi,

Welcome back, sorry about losing a friend  

You  have a bit going on, lets run these programs and see what they remove

See log info:

AdwCleaner:

# AdwCleaner v5.013 - Logfile created 12/10/2015 at 15:27:44
# Updated 09/10/2015 by Xplode
# Database : 2015-10-09.3 [Server]
# Operating system : Windows 7 Ultimate Service Pack 1 (x86)
# Username : Matt - MATT-PC
# Running from : C:\Users\Matt\Desktop\AdwCleaner.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Users\Matt\AppData\Local\slimware utilities inc
[-] Folder Deleted : C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen
[-] Folder Deleted : C:\windows\system32\config\systemprofile\AppData\Local\slimware utilities inc

***** [ Files ] *****

[-] File Deleted : C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kbfnbcaeplbcioakkpcpgfkobkghlhen_0.localstorage
[-] File Deleted : C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\user.js

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
[-] Key Deleted : HKCU\Software\BRS

***** [ Web browsers ] *****

[-] [C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\prefs.js] [Preference] Deleted : user_pref("browser.search.selectedEngine", "Astromenda");
[-] [C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\prefs.js] [Preference] Deleted : user_pref("extensions.aniweather.timeShifted", 1773665);
[-] [C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\prefs.js] [Preference] Deleted : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_dnldstr_14_40_ff&cd=2XzuyEtN2Y1L1QzuzytD0EyC0B0A0FtAtByC0D0DzzzytD0DtN0D0Tzu0StCtDtDyEtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBz[…]
[-] [C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\prefs.js] [Preference] Deleted : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_dnldstr_14_40_ff&cd=2XzuyEtN2Y1L1QzuzytD0EyC0B0A0FtAtByC0D0DzzzytD0DtN0D0Tzu0StCtDtDyEtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEt[…]
[-] [C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\prefs.js] [Preference] Deleted : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\prefs.js] [Preference] Deleted : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\prefs.js] [Preference] Deleted : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_dnldstr_14_40_ff&cd=2XzuyEtN2Y1L1QzuzytD0EyC0B0A0FtAtByC0D0DzzzytD0DtN0D0Tzu0StCtDtDyEtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCy[…]
[-] [C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\prefs.js] [Preference] Deleted : user_pref("extensions.fvd_single.__surfcanyon_disable_time", "1");
[-] [C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\prefs.js] [Preference] Deleted : user_pref("extensions.fvd_single.seopack.b_surfcanyon", true);
[-] [C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : kbfnbcaeplbcioakkpcpgfkobkghlhen

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [4112 bytes] ##########
 

JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.4 (09.28.2015:1)
OS: Windows 7 Ultimate x86
Ran by [removed] on Mon 10/12/2015 at 15:39:37.72
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet

Explorer



~~~ Files

Successfully deleted: [File] C:\Users\Matt\Appdata\Local\google\chrome\user data\default\local

storage\chrome-extension_ajpgkpeckebdhofmmjfgcjjiiejpodla_0.localstorage



~~~ Folders



~~~ FireFox

Successfully deleted: [Folder] C:\Users\Matt\AppData\Roaming\mozilla\firefox\profiles

\3d77u70m.default-1427365063869\extensions\staged
Successfully deleted the following from C:\Users\Matt\AppData\Roaming\mozilla\firefox\profiles

\3d77u70m.default-1427365063869\prefs.js

user_pref

(extensions.lastpass.e4e9d5e73787ea42a50b9f5ae57660f179e2a849132b95451b05349867ec8ae1.searchforsi

teswithinaddressbar, true);
user_pref(extensions.lastpass.searchforsiteswithinaddressbar, true);
Emptied folder: C:\Users\Matt\AppData\Roaming\mozilla\firefox\profiles\3d77u70m.default-

1427365063869\minidumps [2 files]



~~~ Chrome

Successfully deleted: [Folder] C:\Users\Matt\Appdata\Local\Google\Chrome\User Data\Default

\Extensions\ajpgkpeckebdhofmmjfgcjjiiejpodla

[C:\Users\Matt\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search

provider reset

[C:\Users\Matt\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
ajpgkpeckebdhofmmjfgcjjiiejpodla

[C:\Users\Matt\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search

provider reset

[C:\Users\Matt\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions

Deleted:
[
  ajpgkpeckebdhofmmjfgcjjiiejpodla
]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Mon 10/12/2015 at 15:44:46.66
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

Malwarebytes:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 10/12/2015
Scan Time: 6:26 PM
Logfile: Malwarebytes.txt
Administrator: Yes

Version: 2.1.8.1057
Malware Database: v2015.10.12.03
Rootkit Database: v2015.10.06.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Matt

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 379628
Time Elapsed: 11 min, 6 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

The following:

FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:12-10-2015
Ran by [removed] (administrator) on MATT-PC (12-10-2015 20:16:52)
Running from C:\Users\[removed]\Desktop
[removed] Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX86\officeclicktorun.exe
(Dropbox, Inc.) C:\Program Files\Dropbox\Update\DropboxUpdate.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Rosetta Stone Ltd.) C:\Program Files\RosettaStoneLtdServices\RosettaStoneLtdController.exe
(Rosetta Stone Ltd.) C:\Program Files\RosettaStoneLtdServices\RosettaStoneLtdServer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Dropbox, Inc.) C:\Program Files\Dropbox\Client\Dropbox.exe
() C:\Program Files\NETGEAR\USB Control Center\Control Center.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(PcWinTech.com) C:\Program Files\CleanMem\Mini_Monitor.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Ruiware) C:\Program Files\Ruiware\WinPatrol\WinPatrol.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Logitech, Inc.) C:\Program Files\Common Files\logishrd\KHAL3\KHALMNPR.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(NETGEAR Inc.) C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
() C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-09-20] (AVAST Software)
HKLM\…\Run: [Dropbox] => C:\Program Files\Dropbox\Client\Dropbox.exe [36710768 2015-10-01] (Dropbox, Inc.)
HKLM\…\Run: [NETGEAR USB Control Center] => C:\Program Files\NETGEAR\USB Control Center\Control Center.exe [4114944 2013-07-29] ()
HKLM\…\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-17] (NVIDIA Corporation)
HKLM\…\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
HKLM\…\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [2312824 2015-08-25] (Logitech, Inc.)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2015-07-02] (Logitech, Inc.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKLM\…\Policies\Explorer: [MemCheckBoxInRunDlg] 1
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\…\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6495144 2015-09-16] (Piriform Ltd)
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\…\Run: [FileHippo.com] => C:\Program Files\FileHippo.com\FileHippo.AppManager.exe [2926800 2015-01-27] ()
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\…\Run: [Spybot-S&D; Cleaning] => C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\…\Run: [WinPatrol] => C:\Program Files\Ruiware\WinPatrol\winpatrol.exe [1216648 2015-07-26] (Ruiware)
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\…\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\…\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [57981568 2015-09-28] (Skype Technologies S.A.)
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\…\Run: [NETGEARGenie] => C:\Program Files\NETGEAR Genie\bin\NETGEARGenie.exe [602880 2015-06-01] (NETGEAR Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.27.dll [2015-10-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-09-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-09-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-09-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-09-20] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass FF RunOnce.lnk [2015-03-29]
ShortcutTarget: Install LastPass FF RunOnce.lnk -> C:\Program Files\Common Files\lpuninstall.exe (LastPass)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk [2015-03-29]
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files\Common Files\lpuninstall.exe (LastPass)
BootExecute: autocheck autochk * sdnclean.exe
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{06795FB0-A82F-4D15-A7A5-DB9A34191B5F}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{06795FB0-A82F-4D15-A7A5-DB9A34191B5F}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.yahoo.com?fr=hp-avast&type;=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.yahoo.com/yhs/search?type=avastbcl&hspart;=avast&hsimp;=yhs-001&p;={searchTerms}
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://sports.yahoo.com/
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
HKU\S-1-5-21-1872680271-189780992-2905560188-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.yahoo.com?fr=hp-avast&type;=avastbcl
SearchScopes: HKLM -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://search.yahoo.com/yhs/search?type=avastbcl&hspart;=avast&hsimp;=yhs-001&p;={searchTerms}
SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL =
SearchScopes: HKLM -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://search.yahoo.com/yhs/search?type=avastbcl&hspart;=avast&hsimp;=yhs-001&p;={searchTerms}
SearchScopes: HKU\S-1-5-21-1872680271-189780992-2905560188-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1872680271-189780992-2905560188-1000 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL =
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-20] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-03] (AVAST Software)
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files\LastPass\LPToolbar.dll [2015-03-29] (LastPass)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-25] (Logitech, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-09-11] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-09-11] (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-20] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files\LastPass\LPToolbar.dll [2015-03-29] (LastPass)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869
FF DefaultSearchEngine: Google
FF DefaultSearchEngine.US: Google
FF DefaultSearchUrl: hxxps://search.yahoo.com/yhs/search
FF SearchEngineOrder.1: Yahoo! (Avast)
FF Homepage: hxxp://sports.yahoo.com/
FF Keyword.URL: hxxps://search.yahoo.com/yhs/search
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-21] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\windows\system32\Adobe\Director\np32dsw_1220162.dll [2015-08-31] (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-20] (Oracle Corporation)
FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files\LastPass\nplastpass.dll [2015-03-29] (LastPass)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-02-17] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-01-17] (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-17] (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-17] (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-09-23]
FF Extension: Xmarks - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-05-29]
FF Extension: LastPass - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-09-24]
FF Extension: OpenDownload² - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{210249CE-F888-11DD-B868-4CB456D89593} [2015-09-23]
FF Extension: AddThis - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{3e0e7d2a-070f-4a47-b019-91fe5385ba79} [2015-06-01]
FF Extension: Tweak Network - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{DAD0F81A-CF67-4eed-98D6-26F6E47274CA} [2015-05-29]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-03-26]
FF Extension: Cleanest Addon Manager - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-03-26]
FF Extension: Facebook Disconnect - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-03-26]
FF Extension: Ghostery - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-03-26]
FF Extension: Google search link fix - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-03-26]
FF Extension: Google Translator for Firefox - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\[removed] [2015-03-26]
FF Extension: Facebook Phishing Protector - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{023e9ca0-63f3-47b1-bcb2-9badf9d9ef28}.xpi [2015-03-26]
FF Extension: URL Fixer - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{0fa2149e-bb2c-4ac2-a8d3-479599819475}.xpi [2015-03-26]
FF Extension: Flagfox - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2015-03-26]
FF Extension: Ebates Cash Back - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{35d6291e-1d4b-f9b4-c52f-77e6410d1326}.xpi [2015-07-31]
FF Extension: X-notifier - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{37fa1426-b82d-11db-8314-0800200c9a66}.xpi [2015-03-26]
FF Extension: NoScript - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-03-26]
FF Extension: YouTube High Definition - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}.xpi [2015-03-26]
FF Extension: Fasterfox - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi [2015-03-26]
FF Extension: Adblock Plus - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-03-26]
FF Extension: BetterPrivacy - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2015-03-26]
FF Extension: Tab Mix Plus - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2015-03-26]
FF Extension: DownThemAll! - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2015-03-26]
FF HKLM\…\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-09-15]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-19]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-04-07]

Chrome:
=======
CHR HomePage: Default -> hxxp://yahoo.com/
CHR StartupUrls: Default -> "hxxp://sports.yahoo.com/college-football/"
CHR DefaultSearchKeyword: Default -> lp
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.823\_platform_specific\win_x86\widevinecdmadapter.dll => No File
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\45.0.2454.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (AdobeAAMDetect) - C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll => No File
CHR Plugin: (Java Deployment Toolkit 8.0.600.27) - C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 8 U60) - C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (NPLastPass) - C:\Program Files\LastPass\nplastpass.dll (LastPass)
CHR Plugin: (Microsoft Office 2013) - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2013) - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Shockwave for Director) - C:\windows\system32\Adobe\Director\np32dsw_1219160.dll => No File
CHR Plugin: (Shockwave Flash) - C:\windows\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll => No File
CHR Profile: C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-26]
CHR Extension: (Google Docs) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-26]
CHR Extension: (Google Drive) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-08-26]
CHR Extension: (YouTube) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-08-26]
CHR Extension: (Webmail Ad Blocker) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbhfdchmklhpcngcgjmpdbjakdggkkjp [2015-08-26]
CHR Extension: (Adblock Plus) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-08-26]
CHR Extension: (Ebates Cash Back) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\chhjbpecpncaggjpdakmflnfcopglcmi [2015-09-08]
CHR Extension: (Google Search) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-08-26]
CHR Extension: (Google+) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2015-08-26]
CHR Extension: (Google Sheets) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-26]
CHR Extension: (Google Docs Offline) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-04]
CHR Extension: (Avast Online Security) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-08-26]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2015-08-26]
CHR Extension: (Forecastfox) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihffmkcfkejomlfnilnmkokcpgclhfeg [2015-08-26]
CHR Extension: (Dropbox) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2015-08-26]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-08-26]
CHR Extension: (InvisibleHand) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\lghjfnfolmcikomdjmoiemllfnlmmoko [2015-08-26]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-26]
CHR Extension: (Gmail) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-26]
CHR Extension: (Abstract-Blue) - C:\Users\Matt\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnacehkknmafkjgkikclamogikoiaaa [2015-08-26]
CHR HKLM\…\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-09-12]
CHR HKLM\…\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-05]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-09-20] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109008 2015-09-20] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3219136 2015-09-20] (Avast Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe [1879640 2015-09-11] (Microsoft Corporation)
S2 dbupdate; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-09] (Dropbox, Inc.)
S2 dbupdatem; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-09] (Dropbox, Inc.)
R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [370792 2010-01-21] ()
S2 GenieTimelineService; C:\Program Files\NETGEAR\ReadySHARE Vault\GenieTimelineService.exe [314944 2014-06-18] (Genie9)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [921208 2015-08-17] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 NETGEARGenieDaemon; C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe [195840 2015-06-01] (NETGEAR)
R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [167528 2010-01-21] ()
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4305016 2015-08-17] (NVIDIA Corporation)
R2 RosettaStoneLtdController; C:\Program Files\RosettaStoneLtdServices\RosettaStoneLtdController.exe [352312 2008-09-16] (Rosetta Stone Ltd.) [File not signed]
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-12-02] (DEVGURU Co., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\windows\System32\drivers\AsIO.sys [12400 2007-12-17] ()
R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24016 2015-09-20] (AVAST Software)
R1 aswKbd; C:\windows\system32\drivers\aswKbd.sys [26096 2015-09-20] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [76000 2015-09-20] (AVAST Software)
R0 aswNdisFlt; C:\windows\System32\DRIVERS\aswNdisFlt.sys [275856 2015-09-20] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81728 2015-09-20] (AVAST Software)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49776 2015-09-20] (AVAST Software)
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [789296 2015-09-20] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [434184 2015-09-20] (AVAST Software)
R2 aswStm; C:\windows\system32\drivers\aswStm.sys [115640 2015-09-20] (AVAST Software)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [208664 2015-09-20] (AVAST Software)
S3 epmntdrv; C:\windows\system32\epmntdrv.sys [15968 2014-11-18] ()
S3 EuGdiDrv; C:\windows\system32\EuGdiDrv.sys [10208 2014-11-18] ()
R3 LEqdUsb; C:\windows\System32\Drivers\LEqdUsb.Sys [52368 2015-06-17] (Logitech, Inc.)
R3 LHidEqd; C:\windows\System32\Drivers\LHidEqd.Sys [20240 2015-06-17] (Logitech, Inc.)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [98520 2015-10-12] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [51928 2015-06-18] (Malwarebytes Corporation)
R3 mcdbus; C:\windows\System32\DRIVERS\mcdbus.sys [116736 2009-02-24] (MagicISO, Inc.) [File not signed]
R3 MTsensor; C:\windows\System32\DRIVERS\ASACPI.sys [6504 2009-05-13] ()
R3 NetgearUDSMBus; C:\windows\System32\drivers\netgearUDSMBus.sys [112128 2013-07-25] (Windows (R) Codename Longhorn DDK provider)
R3 NetgearUDSTcpBus; C:\windows\System32\drivers\netgearUDSTcpBus.sys [176128 2013-07-25] (Windows (R) Codename Longhorn DDK provider)
R0 ngvss; C:\windows\system32\Drivers\ngvss.sys [107984 2015-09-20] (AVAST Software)
R2 NPF; C:\windows\system32\drivers\npf.sys [35088 2015-08-15] (CACE Technologies, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18552 2015-08-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\windows\System32\drivers\nvvad32v.sys [44840 2015-08-11] (NVIDIA Corporation)
R0 pwdrvio; C:\windows\System32\pwdrvio.sys [17160 2015-03-05] ()
S3 pwdspio; C:\windows\system32\pwdspio.sys [13064 2015-03-05] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-09-20] (Avast Software)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-13] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-12 20:16 - 2015-10-12 20:17 - 00032996 _____ C:\Users\Matt\Desktop\FRST.txt
2015-10-12 20:16 - 2015-10-12 20:16 - 00000000 ____D C:\Users\Matt\Desktop\FRST-OlderVersion
2015-10-12 18:23 - 2015-10-12 18:23 - 00002168 _____ C:\Users\Matt\Documents\JRT.txt
2015-10-12 15:44 - 2015-10-12 15:44 - 00002168 _____ C:\Users\Matt\Desktop\JRT.txt
2015-10-12 15:30 - 2015-10-12 19:09 - 00000504 _____ C:\windows\setupact.log
2015-10-12 15:30 - 2015-10-12 15:30 - 00000000 _____ C:\windows\setuperr.log
2015-10-12 15:22 - 2015-10-12 15:27 - 00000000 ____D C:\AdwCleaner
2015-10-12 15:19 - 2015-10-12 15:19 - 01801288 _____ (Malwarebytes) C:\Users\Matt\Desktop\JRT.exe
2015-10-12 15:17 - 2015-10-12 15:17 - 01682432 _____ C:\Users\Matt\Desktop\AdwCleaner.exe
2015-10-12 09:27 - 2015-10-12 09:27 - 09866963 _____ C:\Users\Matt\Desktop\Siding.jpeg
2015-10-09 12:00 - 2015-09-20 14:03 - 00313472 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2015-10-06 23:25 - 2015-10-06 23:25 - 00000000 ____D C:\Users\Default\AppData\Roaming\AVAST Software
2015-10-06 23:21 - 2015-10-12 20:14 - 00559018 _____ C:\windows\WindowsUpdate.log
2015-10-06 23:15 - 2015-10-12 20:17 - 00000000 ____D C:\FRST
2015-10-06 21:28 - 2015-10-12 20:16 - 01699840 _____ (Farbar) C:\Users\Matt\Desktop\FRST.exe
2015-10-06 21:27 - 2015-10-06 21:28 - 05198336 _____ (AVAST Software) C:\Users\Matt\Desktop\aswMBR.exe
2015-10-02 18:17 - 2015-10-02 18:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-01 09:39 - 2015-10-01 09:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master 10.8
2015-10-01 09:39 - 2015-09-21 00:19 - 02658952 _____ C:\windows\system32\BootMan.exe
2015-10-01 09:39 - 2014-11-18 14:46 - 00021088 _____ C:\windows\system32\EuEpmGdi.dll
2015-10-01 09:39 - 2014-11-18 14:39 - 00015968 _____ C:\windows\system32\epmntdrv.sys
2015-10-01 09:39 - 2014-11-18 14:39 - 00010208 _____ C:\windows\system32\EuGdiDrv.sys
2015-10-01 09:39 - 2014-11-18 14:38 - 00088160 _____ C:\windows\system32\setupempdrv03.exe
2015-09-24 20:39 - 2015-09-24 20:39 - 00000000 ____D C:\Users\Matt\AppData\Roaming\CrystalIdea Software
2015-09-20 14:03 - 2015-09-20 14:03 - 00043112 _____ (AVAST Software) C:\windows\avastSS.scr
2015-09-20 14:02 - 2015-09-20 14:02 - 00275856 _____ (AVAST Software) C:\windows\system32\Drivers\aswNdisFlt.sys
2015-09-17 02:23 - 2015-09-17 02:24 - 00000000 ____D C:\Program Files\GUM16ED.tmp
2015-09-15 11:30 - 2015-09-15 11:30 - 00000000 ____D C:\Users\Matt\AppData\Roaming\sp6_log

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-12 20:17 - 2015-03-29 09:54 - 00000000 ____D C:\Users\Matt\AppData\LocalLow\LastPass
2015-10-12 20:15 - 2015-01-29 20:23 - 00000000 ____D C:\Users\Matt\AppData\Roaming\Skype
2015-10-12 20:02 - 2015-01-17 15:29 - 00098520 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-12 19:46 - 2015-08-30 19:50 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-10-12 19:28 - 2015-08-26 11:12 - 00000886 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-12 19:18 - 2009-07-14 00:34 - 00028016 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-12 19:18 - 2009-07-14 00:34 - 00028016 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-12 19:11 - 2015-07-15 17:00 - 00000000 ___RD C:\Users\Matt\Dropbox
2015-10-12 19:11 - 2015-07-15 16:55 - 00000000 ____D C:\Users\Matt\AppData\Local\Dropbox
2015-10-12 19:09 - 2015-08-26 11:11 - 00000882 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-12 19:09 - 2015-01-17 14:29 - 00000000 ____D C:\ProgramData\NVIDIA
2015-10-12 19:09 - 2014-05-29 21:26 - 00000000 _____ C:\windows\system32\Drivers\lvuvc.hs
2015-10-12 19:09 - 2009-07-14 00:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-10-12 18:58 - 2015-08-30 19:51 - 00000000 ____D C:\Users\Matt\AppData\Roaming\Macromedia
2015-10-12 15:20 - 2015-01-23 22:18 - 00000000 ____D C:\Program Files\SpywareBlaster
2015-10-12 15:20 - 2015-01-17 13:44 - 00000000 ____D C:\ProgramData\TEMP
2015-10-12 08:24 - 2014-06-23 05:52 - 00000000 ____D C:\windows\Minidump
2015-10-09 12:02 - 2015-01-19 23:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-10-06 21:27 - 2015-01-29 20:22 - 00000000 ____D C:\ProgramData\Skype
2015-10-06 21:26 - 2015-04-26 08:39 - 00000000 ____D C:\Users\Matt\AppData\Local\CrashDumps
2015-10-06 21:20 - 2015-08-15 17:04 - 00000000 ____D C:\Users\Matt\AppData\Local\NETGEARGenie
2015-10-04 08:27 - 2015-02-17 17:46 - 00000000 ____D C:\Users\Matt\Downloads\Download Them All
2015-10-02 18:17 - 2015-06-09 16:25 - 00000000 ____D C:\Program Files\Dropbox
2015-10-01 16:32 - 2014-07-02 06:15 - 00000700 _____ C:\windows\wininit.ini
2015-10-01 09:39 - 2014-10-19 20:42 - 00000000 ____D C:\Program Files\EaseUS
2015-10-01 09:32 - 2015-08-28 06:46 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-09-25 18:49 - 2015-08-26 11:14 - 00000000 ____D C:\Users\Matt\AppData\Local\Google
2015-09-24 20:52 - 2015-01-23 21:53 - 00000000 ____D C:\Program Files\CCleaner
2015-09-24 19:50 - 2015-01-17 19:50 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-09-24 19:17 - 2009-07-13 22:37 - 00000000 ____D C:\windows\system32\NDF
2015-09-24 19:01 - 2009-07-14 00:53 - 00032598 _____ C:\windows\Tasks\SCHEDLGU.TXT
2015-09-24 18:43 - 2015-03-01 11:29 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-09-23 17:48 - 2015-03-01 11:29 - 00001098 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-09-21 17:46 - 2015-08-30 19:50 - 00780488 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2015-09-21 17:46 - 2015-08-30 19:50 - 00142536 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2015-09-20 14:05 - 2015-01-19 23:57 - 00002116 _____ C:\Users\Public\Desktop\Avast SafeZone.lnk
2015-09-20 14:03 - 2015-07-15 17:10 - 00107984 _____ (AVAST Software) C:\windows\system32\Drivers\ngvss.sys
2015-09-20 14:03 - 2015-01-19 23:56 - 00024016 _____ (AVAST Software) C:\windows\system32\Drivers\aswHwid.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00789296 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00434184 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00208664 _____ (AVAST Software) C:\windows\system32\Drivers\aswVmm.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00115640 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00081728 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00076000 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00049776 _____ (AVAST Software) C:\windows\system32\Drivers\aswRvrt.sys
2015-09-20 14:03 - 2015-01-19 23:48 - 00026096 _____ (AVAST Software) C:\windows\system32\Drivers\aswKbd.sys
2015-09-15 18:38 - 2015-01-01 11:14 - 00007647 _____ C:\Users\Matt\AppData\Local\resmon.resmoncfg
2015-09-15 18:28 - 2015-08-10 17:26 - 00430504 _____ C:\windows\system32\FNTCACHE.DAT
2015-09-15 11:31 - 2015-01-23 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2015-09-15 11:31 - 2015-01-19 20:16 - 00000000 ____D C:\ProgramData\LogiShrd
2015-09-15 11:31 - 2014-05-30 14:30 - 00000000 ____D C:\Program Files\Logitech
2015-09-15 11:31 - 2014-05-29 21:26 - 00000000 ____D C:\Program Files\Common Files\logishrd
2015-09-15 04:43 - 2009-07-13 22:37 - 00000000 ____D C:\windows\Microsoft.NET

==================== Files in the root of some directories =======

2014-05-29 21:48 - 2015-03-29 10:12 - 10468408 _____ (LastPass) C:\Program Files\Common Files\lpuninstall.exe
2014-12-29 15:22 - 2014-12-29 15:22 - 0160901 _____ () C:\Users\Matt\AppData\Local\ars.cache
2014-12-29 15:23 - 2014-12-29 15:23 - 0261211 _____ () C:\Users\Matt\AppData\Local\census.cache
2014-12-28 23:13 - 2014-12-28 23:13 - 0000036 _____ () C:\Users\Matt\AppData\Local\housecall.guid.cache
2015-01-01 11:14 - 2015-09-15 18:38 - 0007647 _____ () C:\Users\Matt\AppData\Local\resmon.resmoncfg
2014-12-29 15:10 - 2014-12-29 15:10 - 0000010 _____ () C:\Users\Matt\AppData\Local\sponge.last.runtime.cache
2015-01-23 20:02 - 2015-01-23 20:02 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Matt\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpe8u10h.dll
C:\Users\Matt\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-10-11 00:36

==================== End of FRST.txt ============================

Additions:

Additional scan result of Farbar Recovery Scan Tool (x86) Version:12-10-2015
Ran by [removed] (2015-10-12 20:18:13)
Running from C:\Users\[removed]\Desktop
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) (2014-05-30 01:21:36)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1872680271-189780992-2905560188-500 - Administrator - Disabled)
Guest (S-1-5-21-1872680271-189780992-2905560188-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1872680271-189780992-2905560188-1005 - Limited - Enabled)
Matt (S-1-5-21-1872680271-189780992-2905560188-1000 - Administrator - Enabled) => C:\Users\Matt

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat XI Pro (HKLM\…\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.09 - Adobe Systems)
Adobe Flash Player 19 ActiveX (HKLM\…\Adobe Flash Player ActiveX) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM\…\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM\…\Adobe Shockwave Player) (Version: 12.2.0.162 - Adobe Systems, Inc.)
Amazon Send to Kindle (HKLM\…\SendToKindle) (Version: 1.0.1.240 - Amazon)
Avast Premier (HKLM\…\Avast) (Version: 10.4.2233 - AVAST Software)
Bigasoft Total Video Converter 4.2.1.5186 (HKLM\…\{A72CE741-1F32-4D79-BFFB-A714375C678D}_is1) (Version:  - Bigasoft Corporation)
Brother MFL-Pro Suite MFC-7340 (HKLM\…\{46E1B1F2-A279-4356-9B17-029F9CC72EAE}) (Version: 1.0.1.0 - Brother Industries, Ltd.)
CameraHelperMsi (Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM\…\CCleaner) (Version: 5.10 - Piriform)
CleanMem (HKLM\…\CleanMem) (Version: v2.5.0 - PcWinTech.com)
CodeStuff Starter (HKLM\…\CodeStuff Starter) (Version: 5.6.2.9 - CodeStuff)
Cool & Quiet (HKLM\…\{1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}) (Version:  - )
Dropbox (HKLM\…\Dropbox) (Version: 3.10.7 - Dropbox, Inc.)
Dropbox Update Helper (Version: 1.3.27.33 - Dropbox, Inc.) Hidden
EaseUS Partition Master 10.8 (HKLM\…\EaseUS Partition Master_is1) (Version:  - EaseUS)
erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
FileHippo App Manager (HKLM\…\FileHippo.com) (Version:  - FileHippo.com)
Google Chrome (HKLM\…\Google Chrome) (Version: 45.0.2454.101 - Google Inc.)
Google Update Helper (Version: 1.3.28.15 - Google Inc.) Hidden
Internet Explorer (Enable DEP) (HKLM\…\{a9264802-8a7a-40fe-a135-5c6d204aed7a}.sdb) (Version:  - )
Java 8 Update 51 (HKLM\…\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Java 8 Update 60 (HKLM\…\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
LastPass (uninstall only) (HKLM\…\LastPass) (Version:  - LastPass)
Logitech Harmony Remote Software 7 (HKLM\…\{5C6F884D-680C-448B-B4C9-22296EE1B206}) (Version: 7.7.0.0 - Logitech)
Logitech SetPoint 6.67 (HKLM\…\sp6) (Version: 6.67.83 - Logitech)
Logitech Unifying Software 2.50 (HKLM\…\Logitech Unifying) (Version: 2.50.25 - Logitech)
Logitech Webcam Software (HKLM\…\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Magic ISO Maker v5.5 (build 0281) (HKLM\…\Magic ISO Maker v5.5 (build 0281)) (Version:  - )
MagicDisc 2.7.106 (HKLM\…\MagicDisc 2.7.106) (Version:  - )
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM\…\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\…\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM\…\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 - en-us (HKLM\…\ProPlusRetail - en-us) (Version: 15.0.4753.1003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\…\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\…\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
MiniTool Partition Wizard Free 9.1 (HKLM\…\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version:  - MiniTool Solution Ltd.)
Mozilla Firefox 41.0.1 (x86 en-US) (HKLM\…\Mozilla Firefox 41.0.1 (x86 en-US)) (Version: 41.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\…\MozillaMaintenanceService) (Version: 41.0 - Mozilla)
NETGEAR Genie (HKLM\…\NETGEAR Genie) (Version: 2.4.12.00 - NETGEAR Inc.)
NETGEAR USB Control Center   (HKLM\…\{A98ED5B6-8D40-4D1A-ADC5-86D45AD4F7AD}) (Version: 1.36 - NETGEAR)
NVIDIA 3D Vision Controller Driver 340.50 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 341.81 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.81 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\…\NVIDIA Drivers) (Version: 1.10.57.35 - NVIDIA Corporation)
NVIDIA ForceWare Network Access Manager (HKLM\…\{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}) (Version: 1.00.7325.0 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.5.13.6 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.13.6 - NVIDIA Corporation)
NVIDIA Graphics Driver 341.81 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.81 - NVIDIA Corporation)
NVIDIA PhysX (HKLM\…\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4753.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4753.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4753.1003 - Microsoft Corporation) Hidden
ReadySHARE Vault (HKLM\…\ReadySHARE Vault) (Version: 3.0 - Genie9)
Realtek High Definition Audio Driver (HKLM\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
Remote Control USB Driver (HKLM\…\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - )
Revo Uninstaller Pro 3.1.4 (HKLM\…\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.4 - VS Revo Group, Ltd.)
Rosetta Stone Ltd Services (HKLM\…\{2110AF8F-F6E9-4712-A185-1B839C60822E}) (Version: 2.2.1.1 - Rosetta Stone Ltd.)
Rosetta Stone Version 3 (HKLM\…\{99011A6E-5200-11DE-BDB8-7ACD56D89593}) (Version: 3.4.5.0 - Rosetta Stone Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\…\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.51.0 - SAMSUNG Electronics Co., Ltd.)
SDFormatter (HKLM\…\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association)
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.13.6 - NVIDIA Corporation) Hidden
Skype™ 7.12 (HKLM\…\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.12.101 - Skype Technologies S.A.)
Snagit 12 (HKLM\…\{e8720e7e-08a2-4a30-9bce-70aa27c2a3dc}) (Version: 12.2.2.2107 - TechSmith Corporation)
Snagit 12 (Version: 12.2.2 - TechSmith Corporation) Hidden
Spybot - Search & Destroy (HKLM\…\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
SpywareBlaster 5.2 (HKLM\…\SpywareBlaster_is1) (Version: 5.2.0 - BrightFort LLC)
swMSM (HKLM\…\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version:  - )
TeraCopy 2.3 (HKLM\…\TeraCopy_is1) (Version:  - Code Sector)
Tweaking.com - Simple System Tweaker (HKLM\…\Tweaking.com - Simple System Tweaker) (Version: 2.1.0 - Tweaking.com)
Tweaking.com - Windows Repair (All in One) (HKLM\…\Tweaking.com - Windows Repair (All in One)) (Version: 2.10.2 - Tweaking.com)
VLC media player (HKLM\…\VLC media player) (Version: 2.2.1 - VideoLAN)
WinPatrol (HKLM\…\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 33.6.2015.18 - Ruiware)
WinRAR 5.21 (32-bit) (HKLM\…\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

20-09-2015 14:05:18 Device Driver Package Install: Avast Network Service
28-09-2015 00:00:05 Scheduled Checkpoint
06-10-2015 20:58:17 Revo Uninstaller Pro's restore point - µTorrent
09-10-2015 11:58:54 avast! antivirus system restore point
09-10-2015 12:01:37 Device Driver Package Install: Avast Network Service
12-10-2015 15:39:47 JRT Pre-Junkware Removal

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 22:04 - 2015-10-01 09:33 - 00451779 ____R C:\windows\system32\Drivers\etc\hosts

127.0.0.1    localhost
127.0.0.1    3dns.adobe.com 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com activate.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.wip.adobe.com
127.0.0.1    activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com adobe-dns-3.adobe.com adobe-dns-4.adobe.com
127.0.0.1    adobeereg.com practivate.adobe practivate.adobe.com practivate.adobe.newoa practivate.adobe.ntp practivate.adobe.ipp ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com
127.0.0.1    ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com
127.0.0.1    www.adobeereg.com wwis-dubc1-vip60.adobe.com www.wip.adobe.com www.wip1.adobe.com
127.0.0.1    www.wip2.adobe.com www.wip3.adobe.com www.wip4.adobe.com wwis-dubc1-vip60.adobe.com crl.verisign.net CRL.VERISIGN.NET ood.opsource.net
127.0.0.1    www.007guard.com
127.0.0.1    007guard.com
127.0.0.1    008i.com
127.0.0.1    www.008k.com
127.0.0.1    008k.com
127.0.0.1    www.00hq.com
127.0.0.1    00hq.com
127.0.0.1    010402.com
127.0.0.1    www.032439.com
127.0.0.1    032439.com
127.0.0.1    www.0scan.com
127.0.0.1    0scan.com
127.0.0.1    1000gratisproben.com
127.0.0.1    www.1000gratisproben.com
127.0.0.1    1001namen.com
127.0.0.1    www.1001namen.com
127.0.0.1    100888290cs.com
127.0.0.1    www.100888290cs.com
127.0.0.1    www.100sexlinks.com
127.0.0.1    100sexlinks.com
127.0.0.1    10sek.com
127.0.0.1    www.10sek.com

There are 15477 more lines.


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2A1AD197-BF7D-4F3B-8E2F-B1260E6C1EE4} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX86\OfficeC2RClient.exe [2015-09-11] (Microsoft Corporation)
Task: {2E5C3B8A-078B-4CA6-9773-ABC0362C39D7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-26] (Google Inc.)
Task: {4D043D53-7E16-4455-B031-C53B6F19BDC3} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {5180499B-DE87-4321-B4DD-344699D8AE2D} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX86\OfficeC2RClient.exe [2015-09-11] (Microsoft Corporation)
Task: {64D5A9C1-2A74-4B9E-9C44-4D0EB691B25B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-09-11] (Microsoft Corporation)
Task: {675CE470-7532-46FC-8BCE-8B83F5C4126A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-09-11] (Microsoft Corporation)
Task: {6E0F884E-3180-4B11-ACC3-5E4992932D14} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-09-20] (AVAST Software)
Task: {7155F3E1-20E4-4841-98D0-002D46674FD1} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {A620662F-76E1-41DD-8966-85777527353E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd)
Task: {AE10D29D-5A8A-4F46-9C4C-34D5D28F4061} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-26] (Google Inc.)
Task: {B4472C3B-E5CC-46A2-9399-76DCBCC34BA1} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {B86AE087-E0D7-46A8-AB64-96C7436F219E} - System32\Tasks\Clean System Memory => C:\Windows\system32\CleanMem.exe [2014-08-20] (PcWinTech.com)
Task: {C3BE0259-8857-4B32-A839-589D66629675} - System32\Tasks\{C5365236-E6D2-4A6E-9592-AD094E7DF4BE} => pcalua.exe -a "C:\Users\Matt\Downloads\– Misc Downloads\Brother Uninstall Tool.EXE" -d "C:\Users\Matt\Downloads\– Misc Downloads"
Task: {CBA26A4F-9542-4080-82BA-470727D9B719} - System32\Tasks\TechSmith Updater => C:\Program Files\Common Files\TechSmith Shared\Updater\TSCUpdClt.exe [2014-07-31] (TechSmith Corporation)
Task: {E049E9C9-7C2E-412E-A02B-1EE43DE59894} - System32\Tasks\{08CDCD08-D057-4200-B1B1-CFF277414693} => pcalua.exe -a C:\Users\Matt\AppData\Local\Temp\mozOpenDownload\jxpiinstall.exe -d C:\Users\Matt\AppData\Local\Temp\mozOpenDownload
Task: {E134E76D-93F1-45E7-B322-5D2078B6B3B6} - System32\Tasks\{3C299D02-2232-45CE-92EF-17D412EB9B7F} => Firefox.exe http://www.skype.com/go/downloading?source=lightinstaller&ver;=6.21.0.104&LastError;=12002
Task: {E17430FE-86A0-48B3-BDC3-234A679D06CC} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-21] (Adobe Systems Incorporated)
Task: {E4A09F84-5348-4BBD-8985-5ACA6CD94F5D} - System32\Tasks\{3A94318B-2138-42D8-BFDD-3252E91F2202} => Firefox.exe http://ui.skype.com/ui/0/7.1.0.105/en/abandoninstall?source=lightinstaller&page;=tsInstall
Task: {E79E8399-ED7D-4756-9E6F-17CC0F5F5E62} - System32\Tasks\CleanMem Mini Monitor => C:\Program Files\CleanMem\mini_monitor.exe [2014-08-20] (PcWinTech.com)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2014-07-30 22:08 - 2015-08-17 19:28 - 00106800 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2015-09-20 14:03 - 2015-09-20 14:03 - 00103376 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-09-20 14:03 - 2015-09-20 14:03 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-10-12 19:04 - 2015-10-12 19:04 - 02994544 _____ () C:\Program Files\AVAST Software\Avast\defs\15101202\algo.dll
2015-01-17 19:50 - 2014-05-20 03:11 - 00080040 _____ () C:\Program Files\Microsoft Office 15\ClientX86\ApiClient.dll
2015-09-15 04:28 - 2015-08-11 20:57 - 08900672 _____ () C:\Program Files\Microsoft Office 15\root\Office15\1033\GrooveIntlResource.dll
2015-01-23 22:19 - 2012-01-20 15:55 - 00427520 _____ () C:\Program Files\TeraCopy\TeraCopyExt.dll
2015-09-20 14:03 - 2015-09-20 14:03 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-10-12 19:10 - 2015-10-12 19:10 - 00071168 _____ () c:\users\matt\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpe8u10h.dll
2015-07-15 16:57 - 2015-09-23 19:07 - 00012800 _____ () C:\Program Files\Dropbox\Client\QtQuick.2\qtquick2plugin.dll
2015-07-15 16:57 - 2015-09-23 19:07 - 00779776 _____ () C:\Program Files\Dropbox\Client\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-07-30 00:05 - 2015-09-23 19:07 - 00056320 _____ () C:\Program Files\Dropbox\Client\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-07-15 16:57 - 2015-09-23 19:07 - 00012288 _____ () C:\Program Files\Dropbox\Client\QtQuick\Window.2\windowplugin.dll
2013-07-29 10:28 - 2013-07-29 10:28 - 04114944 _____ () C:\Program Files\NETGEAR\USB Control Center\Control Center.exe
2015-03-31 16:38 - 2015-08-17 19:31 - 00011896 _____ () C:\Program Files\NVIDIA Corporation\Update Core\detoured.dll
2014-09-30 16:36 - 2014-09-30 16:36 - 00020288 _____ () C:\Program Files\CCleaner\branding.dll
2015-01-23 22:21 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-01-23 22:21 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2015-01-23 22:21 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2015-01-23 21:35 - 2009-02-27 17:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2014-11-29 22:06 - 2010-01-21 02:52 - 00370792 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
2014-11-29 22:05 - 2010-01-21 02:51 - 00062568 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nv_common.dll
2014-11-29 22:05 - 2010-01-21 02:52 - 00565864 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\SpecialCase.dll
2014-11-29 22:05 - 2010-01-21 02:52 - 00167528 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
2013-09-28 21:14 - 2013-09-28 21:14 - 03369922 _____ () C:\Program Files\NETGEAR Genie\bin\icuin51.dll
2013-09-28 21:13 - 2013-09-28 21:13 - 00544817 _____ () C:\Program Files\NETGEAR Genie\bin\libgcc_s_dw2-1.dll
2013-09-28 21:13 - 2013-09-28 21:13 - 00989805 _____ () C:\Program Files\NETGEAR Genie\bin\libstdc++-6.dll
2013-09-28 21:14 - 2013-09-28 21:14 - 01978690 _____ () C:\Program Files\NETGEAR Genie\bin\icuuc51.dll
2013-09-28 21:14 - 2013-09-28 21:14 - 22378434 _____ () C:\Program Files\NETGEAR Genie\bin\icudt51.dll
2013-09-28 21:14 - 2013-09-28 21:14 - 01233408 _____ () C:\Program Files\NETGEAR Genie\bin\platforms\qwindows.dll
2015-06-12 06:43 - 2015-06-12 06:43 - 00657408 _____ () C:\Program Files\NETGEAR Genie\bin\Genie.dll
2015-04-08 04:52 - 2015-04-08 04:52 - 01688576 _____ () C:\Program Files\NETGEAR Genie\bin\SvtNetworkTool.dll
2015-05-25 05:44 - 2015-05-25 05:44 - 00192512 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Airprint.dll
2015-06-02 01:15 - 2015-06-02 01:15 - 00602624 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Internet.dll
2015-06-15 03:03 - 2015-06-15 03:03 - 06724096 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Map.dll
2014-06-29 21:55 - 2014-06-29 21:55 - 00068608 _____ () C:\Program Files\NETGEAR Genie\bin\QRCode.dll
2014-06-29 22:05 - 2014-06-29 22:05 - 01183232 _____ () C:\Program Files\NETGEAR Genie\bin\qwt.dll
2015-06-15 03:04 - 2015-06-15 03:04 - 03101696 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_MyMedia.dll
2012-10-15 16:27 - 2012-10-15 16:27 - 00111616 _____ () C:\Program Files\NETGEAR Genie\bin\libvlc.dll
2012-10-15 16:28 - 2012-10-15 16:28 - 02286592 _____ () C:\Program Files\NETGEAR Genie\bin\libvlccore.dll
2015-05-25 05:59 - 2015-05-25 05:59 - 01057280 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_NetworkProblem.dll
2014-09-11 04:39 - 2014-09-11 04:39 - 00144896 _____ () C:\Program Files\NETGEAR Genie\bin\DragonNetTool.dll
2015-05-25 05:57 - 2015-05-25 05:57 - 01202688 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_ParentalControl.dll
2015-06-12 05:49 - 2015-06-12 05:49 - 11253248 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Resource.dll
2015-05-25 06:03 - 2015-05-25 06:03 - 02584576 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_RouterConfiguration.dll
2015-05-25 06:03 - 2015-05-25 06:03 - 00200192 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Statistics.dll
2015-05-25 06:04 - 2015-05-25 06:04 - 00891904 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Ui.dll
2015-05-25 06:05 - 2015-05-25 06:05 - 00438272 _____ () C:\Program Files\NETGEAR Genie\bin\GeniePlugin_Wireless.dll
2013-09-28 21:13 - 2013-09-28 21:13 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qgif.dll
2013-08-25 15:07 - 2013-08-25 15:07 - 00052224 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qico.dll
2013-09-28 21:13 - 2013-09-28 21:13 - 00261120 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qjpeg.dll
2013-08-25 15:16 - 2013-08-25 15:16 - 00381952 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qmng.dll
2013-08-25 15:09 - 2013-08-25 15:09 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qsvg.dll
2013-08-25 15:16 - 2013-08-25 15:16 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qtga.dll
2013-08-25 15:16 - 2013-08-25 15:16 - 00390144 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qtiff.dll
2013-08-25 15:16 - 2013-08-25 15:16 - 00045056 _____ () C:\Program Files\NETGEAR Genie\bin\imageformats\qwbmp.dll
2014-06-29 21:55 - 2014-06-29 21:55 - 00081408 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnosePlugin.dll
2015-04-17 06:36 - 2015-04-17 06:36 - 00146944 _____ () C:\Program Files\NETGEAR Genie\bin\DiagnoseDll.dll
2015-06-03 09:53 - 2015-06-03 09:53 - 02356956 _____ () C:\Program Files\NETGEAR Genie\bin\drivers\libntgr_api.dll
2015-02-03 06:09 - 2015-02-03 06:09 - 00072192 _____ () C:\Program Files\NETGEAR Genie\bin\SVTUtils.dll
2014-09-04 02:00 - 2014-09-04 02:00 - 00074240 _____ () C:\Program Files\NETGEAR Genie\bin\NetcardApi.dll
2014-09-04 02:00 - 2014-09-04 02:00 - 00136704 _____ () C:\Program Files\NETGEAR Genie\bin\airprintdll.dll
2012-10-15 16:28 - 2012-10-15 16:28 - 00219648 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\access\libdshow_plugin.dll
2012-10-15 16:28 - 2012-10-15 16:28 - 00049664 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libaout_directx_plugin.dll
2012-10-15 16:28 - 2012-10-15 16:28 - 00051200 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\audio_output\libwaveout_plugin.dll
2012-10-15 16:28 - 2012-10-15 16:28 - 00070144 _____ () C:\Program Files\NETGEAR Genie\bin\plugins\video_output\libdirectx_plugin.dll
2015-05-25 06:05 - 2015-05-25 06:05 - 00642048 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_Update.dll
2015-05-25 06:06 - 2015-05-25 06:06 - 00458752 _____ () C:\Program Files\NETGEAR Genie\bin\InnerPlugin_WirelessExport.dll
2014-06-29 22:33 - 2014-06-29 22:33 - 00046080 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupApiPlugin.dll
2014-09-04 02:00 - 2014-09-04 02:00 - 00066560 _____ () C:\Program Files\NETGEAR Genie\bin\WSetupDll.dll
2013-09-28 21:13 - 2013-09-28 21:13 - 00040960 _____ () C:\Program Files\NETGEAR Genie\bin\printsupport\windowsprintersupport.dll
2015-01-23 22:21 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2015-01-23 22:21 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2015-06-01 23:14 - 2015-06-01 23:14 - 00105216 _____ () C:\Program Files\NETGEAR Genie\bin\genie2_tray.exe
2015-09-24 17:37 - 2015-09-24 17:37 - 01020928 _____ () C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\3d77u70m.default-1427365063869\extensions\[removed]\platform\WINNT_x86-msvc\components\lpxpcom.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\…\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\…\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\…\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\…\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\…\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\…\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\…\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\…\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\…\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\…\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\…\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\…\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\…\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\…\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\…\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\…\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\…\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\…\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\…\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\…\123simsen.com -> www.123simsen.com

There are 20570 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1872680271-189780992-2905560188-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: GenieTimelineService => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Snagit 12.lnk => C:\windows\pss\Snagit 12.lnk.CommonStartup
MSCONFIG\startupreg: 38328050E8A58DA138857FE54AF6A87CC306830A._service_run => "C:\Program Files\Google\Chrome\Application\chrome.exe" –type=service
MSCONFIG\startupreg: EaseUS EPM tray => C:\Program Files\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe
MSCONFIG\startupreg: EaseUS EPM Tray Agent => "C:\Program Files\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\TrayTipAgentE.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{D96966A7-4168-48A0-8D7F-7B2A608821FC}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{6F8E5037-FBF4-4719-8B89-F5C6B6EA94EA}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{C498DFDC-EAFE-430F-BAF3-52C3CB1C9518}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [UDP Query User{8497657D-0A43-4DA7-BEF4-8E4535987EAF}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [{95D45295-63FC-4095-9E6E-93936050CDB5}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{94CC798F-C982-4AF8-8F28-661F468163D1}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [TCP Query User{1D928B61-9500-41FE-959D-4EB4CD188CAE}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [UDP Query User{DD2A251A-B4B3-481B-A1CA-18EC43E2BC5E}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [{978065BC-0373-45BF-BDC9-64F8DBF2B54C}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{3ACAB8E5-AAF6-4A81-B708-5DA3EA7F23E1}] => (Allow) LPort=8298
FirewallRules: [{01B3C5CA-4D96-441E-BB39-56537288A3B3}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{30FD7F73-82B7-4FFD-9CA6-DCE098FB8597}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{6DEA266F-4A64-4604-8A8C-6EB0B3431417}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{2AB10C20-5D42-4198-8D1D-2AE1FB496928}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{AE6096E5-34DF-4B06-9631-46D2DB101E8C}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{40926A57-F69F-4356-97C6-44CDE350DC5A}] => (Allow) C:\Program Files\Rosetta Stone\Rosetta Stone Version 3\RosettaStoneVersion3.exe
FirewallRules: [{5C631478-EDCE-44BE-B0B7-AE1511881EFA}] => (Allow) C:\Program Files\Rosetta Stone\Rosetta Stone Version 3\RosettaStoneVersion3.exe
FirewallRules: [{023C0160-644D-41B9-ADF0-43A5EAD31E5D}] => (Allow) C:\Program Files\Rosetta Stone\Rosetta Stone Version 3\support\bin\win\RosettaStoneLtdServices.exe
FirewallRules: [{4493C9E5-9AC4-4BD6-90BE-D21A73A620BD}] => (Allow) C:\Program Files\Rosetta Stone\Rosetta Stone Version 3\support\bin\win\RosettaStoneLtdServices.exe
FirewallRules: [TCP Query User{8C48A375-1855-4D22-BBEF-17D6BEE62C12}C:\program files\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files\netgear genie\bin\netgeargenie.exe
FirewallRules: [UDP Query User{9AEDBD9A-F645-43E8-84E1-B89A3253A68F}C:\program files\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files\netgear genie\bin\netgeargenie.exe
FirewallRules: [{15F5DA60-9166-4430-A42B-E0BCF476448F}] => (Allow) C:\program files\netgear genie\bin\netgeargenie.exe
FirewallRules: [{18380D54-E877-433C-8E04-38819362F034}] => (Allow) C:\program files\netgear genie\bin\netgeargenie.exe
FirewallRules: [{CF292C91-8B29-416D-A863-AD9871E84A44}] => (Allow) C:\Program Files\NETGEAR\USB Control Center\Control Center.exe
FirewallRules: [{DE40A55D-8BC3-4B85-B888-7546DB1F382E}] => (Allow) C:\Program Files\NETGEAR\USB Control Center\Control Center.exe
FirewallRules: [{122EF238-8B32-48F4-AF01-53F5C639C1BF}] => (Allow) LPort=7423
FirewallRules: [TCP Query User{D9F7E828-A4C7-408A-94E6-E69F8DF13193}C:\program files\netgear\usb control center\control center.exe] => (Allow) C:\program files\netgear\usb control center\control center.exe
FirewallRules: [UDP Query User{F2E081D4-8D4E-4334-B8C2-184DB558E6F3}C:\program files\netgear\usb control center\control center.exe] => (Allow) C:\program files\netgear\usb control center\control center.exe
FirewallRules: [{96DD9DAD-3E01-4F95-A114-12C0D6DDE0CF}] => (Allow) LPort=7423
FirewallRules: [{D3C78D99-FF13-4CF4-B7E5-FFA970308629}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{D3E4A018-1BE4-4203-B345-9024A907C75A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{8B08421A-AE12-4D49-95A9-2389FAB44E7D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{D1B4481D-7CC5-4622-B7C0-E104AB39FB22}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{411E6482-519F-4476-87C2-FE93CCE743A1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{D4D8D48B-9A5F-45FB-B82A-D68C54C8FBDB}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{4D6C0E8E-C352-4D67-B008-3B8BC71482B3}] => (Allow) C:\Program Files\Dropbox\Client\Dropbox.exe
FirewallRules: [{F1D81943-87D6-4C82-8767-145D3CE88460}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{7625B874-F53C-4AFD-B4F8-80BF68C7FEDB}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
DomainProfile\AuthorizedApplications: [C:\Program Files\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D; 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D; 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D; 2 Background update service
StandardProfile\AuthorizedApplications: [C:\Program Files\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/12/2015 08:23:01 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/12 20:23:01.572]: [00005140]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/12/2015 08:23:00 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/12 20:23:00.566]: [00005140]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/12/2015 08:22:59 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/12 20:22:59.560]: [00005140]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/12/2015 08:22:58 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/12 20:22:58.554]: [00005140]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/12/2015 08:22:57 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/12 20:22:57.548]: [00005140]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/12/2015 08:22:56 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/12 20:22:56.537]: [00005140]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/12/2015 08:22:55 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/12 20:22:55.531]: [00005140]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/12/2015 08:22:54 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/12 20:22:54.525]: [00005140]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/12/2015 08:22:53 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/12 20:22:53.519]: [00005140]: CUsbScnDev: DeviceIoControl Illegal response

Error: (10/12/2015 08:22:52 PM) (Source: Brother BrLog) (EventID: 1001) (User: )
Description: STI BrtSTI: [2015/10/12 20:22:52.513]: [00005140]: CUsbScnDev: DeviceIoControl Illegal response


System errors:
=============
Error: (10/12/2015 08:21:50 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume Main Hard Drive.

Error: (10/12/2015 08:21:47 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume Main Hard Drive.

Error: (10/12/2015 08:19:43 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume Main Hard Drive.

Error: (10/12/2015 08:17:44 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume Main Hard Drive.

Error: (10/12/2015 08:15:43 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume Main Hard Drive.

Error: (10/12/2015 08:13:43 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume Main Hard Drive.

Error: (10/12/2015 08:11:43 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume Main Hard Drive.

Error: (10/12/2015 08:09:43 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume Main Hard Drive.

Error: (10/12/2015 08:07:43 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume Main Hard Drive.

Error: (10/12/2015 08:05:43 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume Main Hard Drive.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU E8400 @ 3.00GHz
Percentage of memory in use: 47%
Total physical RAM: 3326.55 MB
Available physical RAM: 1758.03 MB
Total Virtual: 6651.42 MB
Available Virtual: 3698.66 MB

==================== Drives ================================

Drive c: (Main Hard Drive) (Fixed) (Total:465.76 GB) (Free:208.62 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (Main Backup Drive) (Fixed) (Total:298.09 GB) (Free:219.42 GB) NTFS
Drive e: (Second Backup Drive) (Fixed) (Total:74.53 GB) (Free:15.14 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 035DF989)
Partition 1: (Active) - (Size=298.1 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: 90999099)
Partition 1: (Active) - (Size=74.5 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: 189A1899)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

The info below:

Fixlog:

Fix result of Farbar Recovery Scan Tool (x86) Version:12-10-2015
Ran by [removed] (2015-10-12 21:03:53) Run:1
Running from C:\Users\[removed]\Desktop
[removed] Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
Hosts:
CMD: ipconfig /flushdns
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.
C:\windows\system32\GroupPolicy\Machine => moved successfully
C:\windows\system32\GroupPolicy\GPT.ini => moved successfully
"HKLM\SOFTWARE\Policies\Google" => key removed successfully.
"HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => value restored successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========  ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

EmptyTemp: => 60.3 MB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 21:04:36 ====