[removed]
Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Safe Mode (minimal)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVAST Software) C:\Users\fme\Desktop\What The Tech\aswMBR.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\perfmon.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Farbar) C:\Users\fme\Desktop\What The Tech\FRST64 (2).exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\β¦\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2009-12-10] (Synaptics Incorporated)
HKLM\β¦\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9913376 2009-12-29] (Realtek Semiconductor)
HKLM\β¦\Run: [USCService] => C:\Program Files\Dell\Dell ControlPoint\Security Manager\BcmDeviceAndTaskStatusService.exe [34232 2010-06-22] (Broadcom Corporation)
HKLM\β¦\Run: [DBRMTray] => C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe [227328 2011-03-08] (Dell Computer Corporation)
HKLM-x32\β¦\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [114368 2015-02-06] (VMware, Inc.)
HKLM-x32\β¦\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25197248 2016-08-30] (Dropbox, Inc.)
HKLM\β¦\RunOnce: [DBRMTray] => C:\Dell\DBRM\Reminder\TrayApp.exe [7168 2010-02-04] (Microsoft)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)
HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [797328 2016-02-26] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\MountPoints2: D - D:\VerizonWirelessUpgradeAssistantSetup.exe -a
HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\MountPoints2: {02b0a46b-0488-11e6-86ac-eff7a4777fb7} - D:\VZW_Software_upgrade_assistant.exe
HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\MountPoints2: {7c267201-8810-11e5-aff8-84e449e1a881} - D:\VZW_Software_upgrade_assistant.exe
HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\MountPoints2: {e0e39668-0e73-11e6-af06-ad87f7bc2e4b} - D:\VerizonWirelessUpgradeAssistantSetup.exe -a
HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\MountPoints2: {e0e39725-0e73-11e6-af06-ad87f7bc2e4b} - D:\VerizonWirelessUpgradeAssistantSetup.exe -a
HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\MountPoints2: {f59a4656-0540-11e6-92c5-fbb4b3681670} - D:\VZW_Software_upgrade_assistant.exe
HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\MountPoints2: {f59a470c-0540-11e6-92c5-fbb4b3681670} - D:\VZW_Software_upgrade_assistant.exe
Lsa: [Authentication Packages] msv1_0 wvauth
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers: [EnabledUnlockedFDEIconOverlay] -> {30D3C2AF-9709-4D05-9CF4-13335F3C1E4A} => C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmIconOverlay.dll [2010-03-29] (Wave Systems Corp.)
ShellIconOverlayIdentifiers: [UninitializedFdeIconOverlay] -> {CF08DA3E-C97D-4891-A66B-E39B28DD270F} => C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmIconOverlay.dll [2010-03-29] (Wave Systems Corp.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-30] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-30] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2011-08-29]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Uninstall Webroot RunOnce.lnk [2015-03-11]
ShortcutTarget: Uninstall Webroot RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (Webroot Software, Inc.)
Startup: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Uninstall Webroot RunOnce.lnk [2015-03-11]
ShortcutTarget: Uninstall Webroot RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (Webroot Software, Inc.)
Startup: C:\Users\fmeadmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-07-16]
ShortcutTarget: Dropbox.lnk -> C:\Users\fme\AppData\Roaming\Dropbox\bin\Dropbox.exe (No File)
Startup: C:\Users\IPD Intranet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Uninstall Webroot RunOnce.lnk [2015-03-11]
ShortcutTarget: Uninstall Webroot RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (Webroot Software, Inc.)
Startup: C:\Users\Robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Uninstall Webroot RunOnce.lnk [2015-03-11]
ShortcutTarget: Uninstall Webroot RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (Webroot Software, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4 192.168.1.1
Tcpip\..\Interfaces\{8BCD882B-CD20-46F8-A234-872F4C8FBEE2}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{8BCD882B-CD20-46F8-A234-872F4C8FBEE2}: [DhcpNameServer] 8.8.8.8 8.8.4.4 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-963752047-1521292436-1757112234-1006\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc;=UE07&ocid;=UE07DHP
SearchScopes: HKLM -> {07A6A233-1D04-41F0-BF13-53FC14E0C18B} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=DLRDF8&pc;=MDDR&src;=IE-SearchBox
SearchScopes: HKLM-x32 -> {07A6A233-1D04-41F0-BF13-53FC14E0C18B} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=DLRDF8&pc;=MDDR&src;=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {07A6A233-1D04-41F0-BF13-53FC14E0C18B} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-963752047-1521292436-1757112234-1006 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-07-12] (Microsoft Corporation)
BHO: Javaβ’ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll [2014-12-19] (Sun Microsystems, Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2016-07-05] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-07-05] (Microsoft Corporation)
BHO: Javaβ’ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2014-12-19] (Sun Microsystems, Inc.)
BHO-x32: Javaβ’ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-10-25] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: No Name -> {963C8283-AE7F-4AA6-9B3B-847A8FC62C5E} -> No File
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2016-07-05] (Microsoft Corporation)
BHO-x32: Javaβ’ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-10-25] (Oracle Corporation)
Toolbar: HKLM-x32 - VIPRE Search Guard Toolbar - {A924C17A-5E94-4E02-BED5-49720BA6F7FA} - No File
Toolbar: HKU\S-1-5-21-963752047-1521292436-1757112234-1006 -> No Name - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - No File
IE Session Restore: HKU\S-1-5-21-963752047-1521292436-1757112234-1006 -> is enabled.
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-04-19] (Microsoft Corporation)
Handler: vipresg - {47BE2E5B-703B-444F-ABD3-05717D2191C6} - No File
FireFox:
========
FF ProfilePath: C:\Users\fme\AppData\Roaming\Mozilla\Firefox\Profiles\dxm4wb9f.default
FF DefaultSearchEngine.US: Google
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-13] ()
FF Plugin: @java.com/DTPlugin,version=1.6.0_45 -> C:\Windows\system32\npdeployJava1.dll [2014-12-19] (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll [2014-12-19] (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-13] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-10-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-10-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-10-26] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Extension: (Firefox Hotfix) - C:\Users\fme\AppData\Roaming\Mozilla\Firefox\Profiles\dxm4wb9f.default\Extensions\[removed] [2016-09-04]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\fme\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.866\_platform_specific\win_x86\widevinecdmadapter.dll => No File
CHR Plugin: (Shockwave Flash) - C:\Users\fme\AppData\Local\Google\Chrome\User Data\PepperFlash\21.0.0.216\pepflashplayer.dll => No File
CHR Profile: C:\Users\fme\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Sortd Smart Skin for Gmail) - C:\Users\fme\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohlfneeliakfcefeffppfplagbccbni [2016-05-11]
CHR Extension: (Hover Hound) - C:\Users\fme\AppData\Local\Google\Chrome\User Data\Default\Extensions\dogmhlelnjpjgahofccgbfnmojkmlfep [2016-08-20]
CHR Extension: (Blogs of War) - C:\Users\fme\AppData\Local\Google\Chrome\User Data\Default\Extensions\kiihhjhnmdbpabnecijjbbgbegoppcgd [2015-10-26]
CHR Extension: (Chrome Web Store Payments) - C:\Users\fme\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
CHR Extension: (Chrome Media Router) - C:\Users\fme\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-29]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 BrcmMgmtAgent; C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe [152064 2009-10-23] (Broadcom Corporation) [File not signed]
S2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3189488 2016-07-02] (Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-11-12] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-11-12] (Dropbox, Inc.)
S3 DeskNowDB; C:\Program Files (x86)\DeskNow\pgsql\bin\pg_ctl.exe [75249 2009-03-20] (PostgreSQL Global Development Group) [File not signed]
S2 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [244448 2014-10-28] (Foxit Software Inc.)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
S2 MSSQL$SQLEXPRESS; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S2 MSSQL$SQLEXPRESS_ID; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S2 MSSQL$SQLEXPRESS_ID2; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.3\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S4 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [187024 2016-02-26] (Sandboxie Holdings, LLC)
S4 SecureStorageService; C:\Program Files\Wave Systems Corp\Secure Storage Manager\SecureStorageService.exe [1558016 2010-02-03] (Wave Systems Corp.) [File not signed]
S2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S4 tcsd_win32.exe; C:\Program Files (x86)\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe [1273856 2008-11-12] () [File not signed]
S4 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [12730048 2015-02-06] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.2.0.5\WsAppService.exe [411648 2016-03-31] (Wondershare) [File not signed]
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\Dr.Fone for Android\DriverInstall.exe [115856 2016-04-22] (Wondershare)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [140672 2016-03-10] (Malwarebytes)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-09-04] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
S3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [204944 2016-02-26] (Sandboxie Holdings, LLC)
R1 SBRE; C:\Windows\system32\drivers\SBREdrv.sys [55384 2011-04-29] (Sunbelt Software)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [76480 2015-01-07] (VMware, Inc.)
S2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [33872 2013-08-28] (VMware, Inc.)
U3 aswMBR; \??\C:\Users\fme\AppData\Local\Temp\aswMBR.sys [X]
U3 aswVmm; \??\C:\Users\fme\AppData\Local\Temp\aswVmm.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-09-04 12:45 - 2016-09-05 06:38 - 00245208 _____ C:\Windows\ntbtlog.txt
2016-09-04 04:22 - 2016-09-05 06:38 - 00000000 ____D C:\Users\fme\Desktop\What The Tech
2016-09-04 02:29 - 2016-09-04 02:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-09-04 02:28 - 2016-09-04 02:28 - 22851472 _____ (Malwarebytes ) C:\Users\fme\Downloads\mbam-setup-2.2.1.1043.exe
2016-09-04 02:27 - 2016-09-04 02:28 - 06705178 _____ C:\Users\fme\Downloads\mbam-chameleon-3.1.33.0.zip
2016-09-03 22:45 - 2016-09-03 22:45 - 00026971 _____ C:\Users\fme\Downloads\kitsrus kit 67 DC Speed Controller.pdf
2016-09-03 22:02 - 2016-09-03 22:02 - 00045056 _____ C:\Users\fme\Downloads\4Wtransmiter.pcb
2016-09-03 22:00 - 2016-09-03 22:00 - 00200486 _____ C:\Users\fme\Downloads\4W_FM_Transmitter_Persian.zip
2016-09-02 18:05 - 2016-09-02 18:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-08-27 00:56 - 2016-08-27 00:57 - 45683951 _____ C:\Users\fme\Downloads\CassellsCarpentryandJoinery_10003642.pdf
2016-08-26 20:49 - 2016-08-26 20:49 - 00820686 _____ C:\Users\fme\Downloads\Tips_for_Successful_Citrus_Grafting (2).pdf
2016-08-24 22:38 - 2016-08-24 22:38 - 00251475 _____ C:\Users\fme\Downloads\Condensation - The Basics.pdf
2016-08-21 21:18 - 2016-08-21 21:18 - 00002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp Viewer.lnk
2016-08-21 21:18 - 2016-08-21 21:18 - 00002441 _____ C:\Users\Public\Desktop\SketchUp Viewer.lnk
2016-08-21 21:18 - 2016-08-21 21:18 - 00000000 ____D C:\Users\fme\AppData\Roaming\SketchUp
2016-08-21 21:18 - 2016-08-21 21:18 - 00000000 ____D C:\ProgramData\SketchUp
2016-08-21 21:18 - 2016-08-21 21:18 - 00000000 ____D C:\Program Files (x86)\SketchUp
2016-08-21 21:16 - 2016-08-21 21:16 - 17887232 _____ C:\Users\fme\Downloads\SketchUpViewer-en.msi
2016-08-21 21:12 - 2016-08-21 21:12 - 00000000 ____D C:\Users\fme\AppData\Roaming\IsolatedStorage
2016-08-21 21:12 - 2016-08-21 21:12 - 00000000 ____D C:\Users\fme\AppData\Local\FileViewPro
2016-08-21 21:11 - 2016-08-21 21:11 - 00000000 ____D C:\Spacekace
2016-08-21 21:10 - 2016-08-21 21:11 - 02173104 _____ C:\Users\fme\Downloads\Setup_FileViewPro_2016.exe
2016-08-21 20:27 - 2016-08-21 20:27 - 00055466 _____ C:\Users\fme\Downloads\HoneyDryerPipe.skp
2016-08-21 20:14 - 2016-08-21 20:15 - 00177928 _____ C:\Users\fme\Downloads\jas_52_1_2008_7.pdf
2016-08-20 22:38 - 2016-08-20 22:38 - 00001371 _____ C:\Users\fme\Desktop\procexp.exe - Shortcut.lnk
2016-08-20 21:13 - 2016-08-20 21:13 - 01270466 _____ C:\Users\fme\Downloads\ProcessExplorer (1).zip
2016-08-20 19:14 - 2016-08-20 20:21 - 00000000 ____D C:\742773f8678956e486600b3f63
2016-08-20 19:12 - 2016-08-20 20:21 - 00000000 ____D C:\1d1119f2d8bc508469501e88c18d
2016-08-20 12:55 - 2016-08-20 20:21 - 00000000 ____D C:\5f72f7fa9670ab770f0c225947f431e5
2016-08-20 12:43 - 2016-08-20 20:21 - 00000000 ____D C:\f76d2ad7a2eca4f2729fad6d8f9c5e12
2016-08-20 12:33 - 2016-08-20 20:21 - 00000000 ____D C:\a4158702050feaa34700f13439
2016-08-20 12:06 - 2016-08-20 20:21 - 00000000 ____D C:\e5c138daf40bac9c8cfe2d72cb73
2016-08-20 12:00 - 2016-08-20 20:21 - 00000000 ____D C:\3902b317f3820f595a1a
2016-08-20 11:57 - 2016-08-20 20:21 - 00000000 ____D C:\353ae6cf7ed6bfd3b0e1ba0353ec
2016-08-20 11:43 - 2016-08-20 20:21 - 00000000 ____D C:\93977193a13227bf827db150
2016-08-20 11:34 - 2016-08-20 20:21 - 00000000 ____D C:\e6d9fcf2ac47d7a1139dbef09582fd
2016-08-20 11:09 - 2016-08-20 11:09 - 00000000 ____D C:\Windows\CheckSur
2016-08-19 23:33 - 2016-08-20 20:21 - 00000000 ____D C:\ab6d4df6aae5718572d8dfc5
2016-08-19 23:17 - 2016-08-20 20:21 - 00000000 ____D C:\97ba98b915bcbb92bcaf4aa139aabb22
2016-08-19 23:12 - 2016-08-19 23:17 - 564744309 _____ C:\Users\fme\Downloads\Windows6.1-KB947821-v34-x64.msu
2016-08-19 21:04 - 2016-08-19 21:04 - 00000000 ____D C:\Windows\system32\%LocalAppData%
2016-08-18 23:07 - 2016-08-20 20:17 - 00000000 ____D C:\Users\fme\Desktop\BleepingComputer4
2016-08-18 21:26 - 2016-08-18 21:27 - 00000000 ____D C:\Users\fme\Desktop\BleepingComputer3
2016-08-18 21:18 - 2016-08-20 21:16 - 00000000 ____D C:\Users\fme\Downloads\ProcessExplorer
2016-08-18 21:16 - 2016-08-18 21:16 - 01270466 _____ C:\Users\fme\Downloads\ProcessExplorer.zip
2016-08-18 01:28 - 2016-08-18 01:28 - 00015004 _____ C:\Users\fme\Downloads\Decline-SupersededUpdates.txt
2016-08-17 20:55 - 2016-08-17 20:55 - 00000000 ____D C:\ProgramData\Sophos
2016-08-17 20:41 - 2016-08-17 20:41 - 00000000 ____D C:\Program Files (x86)\Sophos
2016-08-17 20:28 - 2016-08-17 20:28 - 00000560 _____ C:\Users\fme\Desktop\JRT.txt
2016-08-17 18:52 - 2016-08-20 20:17 - 00000000 ____D C:\Users\fme\Desktop\BleepingComputer2
2016-08-17 00:54 - 2016-08-17 00:54 - 00000002 _____ C:\Users\fme\Desktop\Rkill.txt
2016-08-16 13:56 - 2016-08-16 13:56 - 01446380 _____ C:\Users\fme\Downloads\FDHRETOFMEGEVXE.pdf
2016-08-11 23:39 - 2016-08-16 23:24 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-08-11 23:38 - 2016-08-20 20:17 - 00000000 ____D C:\Users\fme\Desktop\mbar
2016-08-11 22:58 - 2016-08-20 20:17 - 00000000 ____D C:\Users\fme\Desktop\BleepingComputer1
2016-08-11 22:58 - 2016-08-11 22:58 - 00000000 ____D C:\Users\fme\Desktop\New folder
2016-08-10 00:42 - 2016-08-10 00:43 - 00291606 _____ C:\Users\fme\Downloads\TCPView.zip
2016-08-10 00:41 - 2016-08-10 00:42 - 14221640 _____ C:\Users\fme\Downloads\pingplotter_install.exe
2016-08-07 23:32 - 2016-08-20 20:25 - 00000000 ___HD C:\Users\fme\AppData\Local\MSU
2016-08-07 23:32 - 2016-08-07 23:32 - 00000000 ____D C:\Users\fme\AppData\Roaming\com.motorola.globaltethered.GUIModel
2016-08-07 23:31 - 2016-08-20 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Software Upgrade Assistant
2016-08-07 23:31 - 2016-08-20 20:23 - 00000000 ____D C:\Program Files\Software Upgrade Assistant
2016-08-07 23:03 - 2016-08-07 23:03 - 03787600 _____ (Portforward, LLC) C:\Users\fme\Downloads\setup-network-utilities.exe
2016-08-07 16:54 - 2016-08-07 16:54 - 00000287 _____ C:\Users\fme\Documents\To Reset Crashplan PROe Admin Password.txt
2016-08-06 20:55 - 2016-08-06 20:55 - 92515739 _____ C:\Users\fme\Downloads\WRT610Nv2_SetupWizard_Windows_09196.zip
2016-08-06 12:05 - 2016-08-06 12:06 - 00880774 _____ C:\Users\fme\Downloads\rr-polar-metallic-canon-pro100.zip
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-09-05 06:38 - 2016-01-25 18:57 - 00000000 ____D C:\FRST
2016-09-04 12:54 - 2014-10-25 20:06 - 01112322 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-04 12:54 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\inf
2016-09-04 12:38 - 2015-11-12 19:09 - 00000902 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2016-09-04 12:38 - 2015-07-16 21:12 - 00000930 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-963752047-1521292436-1757112234-1001UA.job
2016-09-04 12:38 - 2015-06-19 21:06 - 00000910 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-963752047-1521292436-1757112234-1006UA.job
2016-09-04 12:38 - 2013-02-02 22:48 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-09-04 12:38 - 2013-02-02 22:29 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-09-04 10:44 - 2009-07-13 23:45 - 00021312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-09-04 10:44 - 2009-07-13 23:45 - 00021312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-09-04 10:40 - 2015-03-02 21:19 - 00000000 ___RD C:\Users\fme\Dropbox
2016-09-04 10:35 - 2015-07-15 20:54 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-09-04 10:32 - 2015-11-12 19:09 - 00000898 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2016-09-04 10:32 - 2013-02-02 22:29 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-09-04 10:32 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-04 02:30 - 2015-07-15 20:54 - 00001104 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-09-04 02:30 - 2015-07-15 20:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-09-04 01:16 - 2015-06-19 21:06 - 00000858 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-963752047-1521292436-1757112234-1006Core.job
2016-09-04 00:02 - 2015-11-10 21:15 - 00007598 _____ C:\Users\fme\AppData\Local\Resmon.ResmonCfg
2016-09-03 23:50 - 2015-09-07 23:12 - 00000000 ____D C:\Program Files (x86)\qBittorrent
2016-09-03 21:17 - 2015-07-16 21:12 - 00000878 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-963752047-1521292436-1757112234-1001Core.job
2016-09-02 18:05 - 2015-11-12 19:09 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-08-26 20:53 - 2016-01-26 21:36 - 00000000 ____D C:\Users\fme\Downloads\Citrus
2016-08-20 21:41 - 2015-12-26 12:49 - 00000000 ____D C:\Users\fme\Documents\Outlook Files
2016-08-20 21:14 - 2014-10-26 14:04 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-08-20 20:49 - 2012-02-02 20:34 - 00111896 _____ C:\Users\fme\AppData\Local\GDIPFONTCACHEV1.DAT
2016-08-20 20:48 - 2012-02-02 20:34 - 00000000 ____D C:\Users\fme
2016-08-20 20:31 - 2015-06-14 22:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
2016-08-20 20:28 - 2014-12-11 16:41 - 00000000 ____D C:\Users\Robin
2016-08-20 20:28 - 2011-11-07 22:21 - 00000000 ____D C:\Users\IPD Intranet
2016-08-20 20:28 - 2011-11-06 23:05 - 00000000 ____D C:\Users\DefaultAppPool
2016-08-20 20:28 - 2011-11-06 22:44 - 00000000 ____D C:\Users\Classic .NET AppPool
2016-08-20 20:28 - 2011-11-03 18:37 - 00000000 ____D C:\Users\fmeadmin
2016-08-20 20:28 - 2010-11-21 02:16 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-08-20 20:28 - 2009-07-14 00:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-08-20 20:28 - 2009-07-13 22:20 - 00000000 __RSD C:\Windows\Media
2016-08-20 20:27 - 2014-12-23 20:27 - 00000000 ____D C:\Windows\system32\SetupFiles
2016-08-20 20:27 - 2014-10-26 14:10 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-08-20 20:27 - 2011-08-29 13:59 - 00000000 ____D C:\Windows\SysWOW64\x64
2016-08-20 20:27 - 2011-08-29 13:59 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-08-20 20:27 - 2009-07-14 00:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2016-08-20 20:27 - 2009-07-14 00:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2016-08-20 20:27 - 2009-07-14 00:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2016-08-20 20:27 - 2009-07-13 22:20 - 00000000 __RHD C:\Users\Public\Libraries
2016-08-20 20:27 - 2009-07-13 22:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-08-20 20:27 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\TAPI
2016-08-20 20:27 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system32\sysprep
2016-08-20 20:27 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system32\NDF
2016-08-20 20:27 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system32\Msdtc
2016-08-20 20:27 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system32\inetsrv
2016-08-20 20:27 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system32\ias
2016-08-20 20:26 - 2015-07-16 21:13 - 00000000 ____D C:\Users\fmeadmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-08-20 20:26 - 2015-07-14 22:08 - 00000000 ____D C:\Windows\pss
2016-08-20 20:26 - 2015-02-19 01:24 - 00000000 ____D C:\Users\fmeadmin\AppData\Roaming\uTorrent
2016-08-20 20:26 - 2015-01-07 21:45 - 00000000 ____D C:\Users\fmeadmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NirSoft ProduKey
2016-08-20 20:26 - 2014-12-23 20:28 - 00000000 ____D C:\Users\fmeadmin\Downloads\AikinDownLoads
2016-08-20 20:26 - 2014-12-19 18:08 - 00000000 ____D C:\Windows\Patches
2016-08-20 20:26 - 2014-10-26 14:22 - 00000000 ___RD C:\Users\fmeadmin\OneDrive
2016-08-20 20:26 - 2013-07-11 12:44 - 00000000 ____D C:\Users\fmeadmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winrad
2016-08-20 20:26 - 2013-07-11 12:29 - 00000000 ____D C:\Users\fmeadmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ExtIO_USRP+FCD+RTL2832U + BorIP
2016-08-20 20:26 - 2011-12-25 00:18 - 00000000 ____D C:\Windows\Minidump
2016-08-20 20:26 - 2011-11-06 23:20 - 00000000 ___RD C:\Users\fmeadmin\Dropbox
2016-08-20 20:26 - 2011-11-04 09:38 - 00000000 ____D C:\Users\fmeadmin\Desktop\Vipre Home Premium
2016-08-20 20:26 - 2011-08-29 12:42 - 00000000 ____D C:\Windows\en
2016-08-20 20:26 - 2011-08-29 12:28 - 00000000 ____D C:\Windows\system32\BioAPIFFDB
2016-08-20 20:25 - 2016-05-01 13:59 - 00000000 ____D C:\Users\fme\AppData\Roaming\asoftech
2016-08-20 20:25 - 2016-04-27 23:08 - 00000000 ____D C:\Users\fme\Downloads\OK3_ROOT
2016-08-20 20:25 - 2016-04-01 23:17 - 00000000 ____D C:\Users\fme\AppData\Roaming\Brilliant Database v10.54B Server 05701
2016-08-20 20:25 - 2016-04-01 23:12 - 00000000 ____D C:\Users\fme\AppData\Roaming\Brilliant Database v10.5 Server 05700
2016-08-20 20:25 - 2016-03-22 19:37 - 00000000 ____D C:\Users\fme\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EchoLink
2016-08-20 20:25 - 2016-02-22 23:55 - 00000000 ____D C:\Users\fme\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux
2016-08-20 20:25 - 2016-02-22 23:55 - 00000000 ____D C:\Users\fme\AppData\Local\FluxSoftware
2016-08-20 20:25 - 2016-01-01 23:58 - 00000000 ____D C:\Users\fme\AppData\Roaming\7-PDFSplitMerge
2016-08-20 20:25 - 2015-12-30 20:58 - 00000000 ____D C:\Users\fme\AppData\Roaming\xm1
2016-08-20 20:25 - 2015-12-30 20:44 - 00000000 ____D C:\Users\fme\AppData\Roaming\BaKoMa TeX
2016-08-20 20:25 - 2015-12-30 20:42 - 00000000 ____D C:\Users\fme\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BaKoMa TeX
2016-08-20 20:25 - 2015-12-30 20:12 - 00000000 ____D C:\Users\fme\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeX Live 2015
2016-08-20 20:25 - 2015-11-19 13:44 - 00000000 ___SD C:\Users\fme\Documents\My Data Sources
2016-08-20 20:25 - 2015-09-14 00:25 - 00000000 ____D C:\Users\fme\Desktop\Tor Browser
2016-08-20 20:25 - 2015-09-07 12:06 - 00000000 ____D C:\Users\fme\AppData\Roaming\Vuze Leap
2016-08-20 20:25 - 2015-09-07 12:06 - 00000000 ____D C:\Users\fme\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vuze Leap
2016-08-20 20:25 - 2015-07-23 14:11 - 00000000 ____D C:\Users\fme\Downloads\Spectrum Analyzer Specpl
2016-08-20 20:25 - 2015-06-14 22:49 - 00000000 ____D C:\Users\fme\Downloads\Windows 7 Ultimate SP1 (64 Bit)
2016-08-20 20:25 - 2015-06-14 22:14 - 00000000 ____D C:\Users\fme\AppData\Roaming\VMware
2016-08-20 20:25 - 2015-04-23 23:20 - 00000000 ____D C:\Users\fme\AppData\Local\GitHub
2016-08-20 20:25 - 2015-04-23 23:19 - 00000000 ____D C:\Users\fme\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2016-08-20 20:25 - 2015-04-20 00:44 - 00000000 ____D C:\Users\fme\AppData\Roaming\RStudio
2016-08-20 20:25 - 2015-04-19 22:54 - 00000000 ____D C:\Users\fme\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Git
2016-08-20 20:25 - 2015-03-02 20:35 - 00000000 ____D C:\Users\fme\AppData\Local\Microsoft Help
2016-08-20 20:25 - 2015-01-22 19:39 - 00000000 ____D C:\Users\fme\AppData\Roaming\texstudio
2016-08-20 20:25 - 2015-01-17 20:00 - 00000000 ____D C:\Users\fme\AppData\Local\lptmp1822447471
2016-08-20 20:25 - 2013-07-11 16:49 - 00000000 ____D C:\usb_driver
2016-08-20 20:25 - 2013-01-05 22:31 - 00000000 ____D C:\Users\fme\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell
2016-08-20 20:25 - 2012-02-02 22:11 - 00000000 ____D C:\Users\fme\Downloads\Sandboxie v3.62 Incl. Crack
2016-08-20 20:23 - 2016-05-01 15:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dupeGuru
2016-08-20 20:23 - 2016-05-01 13:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asoftech Data Recovery
2016-08-20 20:23 - 2016-05-01 00:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VisiPics
2016-08-20 20:23 - 2016-05-01 00:25 - 00000000 ____D C:\Program Files (x86)\VisiPics
2016-08-20 20:23 - 2016-04-30 22:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wickr Me
2016-08-20 20:23 - 2016-04-30 22:05 - 00000000 ____D C:\Program Files (x86)\Wickr Inc
2016-08-20 20:23 - 2016-04-30 19:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS MobiSaver for Android
2016-08-20 20:23 - 2016-04-30 19:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2016-08-20 20:23 - 2016-04-30 19:08 - 00000000 ____D C:\Program Files (x86)\Wondershare
2016-08-20 20:23 - 2016-04-27 21:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2016-08-20 20:23 - 2016-04-03 21:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie
2016-08-20 20:23 - 2016-04-02 02:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Web Designer
2016-08-20 20:23 - 2016-04-01 21:37 - 00000000 ____D C:\Program Files\Bonjour
2016-08-20 20:23 - 2016-04-01 19:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AppGini
2016-08-20 20:23 - 2016-02-25 19:23 - 00000000 ____D C:\Program Files\Bitdefender Agent
2016-08-20 20:23 - 2016-01-02 10:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kernel for PDF to Word
2016-08-20 20:23 - 2016-01-02 02:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFZilla
2016-08-20 20:23 - 2016-01-02 01:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UniPDF
2016-08-20 20:23 - 2016-01-02 01:11 - 00000000 ____D C:\Program Files (x86)\UniPDF
2016-08-20 20:23 - 2016-01-01 23:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AbleWord
2016-08-20 20:23 - 2016-01-01 01:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraEdit
2016-08-20 20:23 - 2015-12-31 23:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeXstudio
2016-08-20 20:23 - 2015-12-31 23:10 - 00000000 ____D C:\Program Files (x86)\TeXstudio
2016-08-20 20:23 - 2015-12-30 20:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Texmaker
2016-08-20 20:23 - 2015-10-21 22:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MySoftware
2016-08-20 20:23 - 2015-10-19 19:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quicken 2015
2016-08-20 20:23 - 2015-09-08 23:23 - 00000000 ____D C:\Program Files\CCleaner
2016-08-20 20:23 - 2015-07-25 21:13 - 00000000 ____D C:\Program Files\paint.net
2016-08-20 20:23 - 2015-06-14 22:07 - 00000000 ____D C:\Program Files\Common Files\VMware
2016-08-20 20:23 - 2015-06-14 22:06 - 00000000 ____D C:\ProgramData\VMware
2016-08-20 20:23 - 2015-06-14 22:06 - 00000000 ____D C:\Program Files (x86)\VMware
2016-08-20 20:23 - 2015-05-17 02:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DeskNow
2016-08-20 20:23 - 2015-04-20 00:52 - 00000000 ____D C:\Program Files\Rtools
2016-08-20 20:23 - 2015-04-20 00:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RStudio
2016-08-20 20:23 - 2015-04-20 00:41 - 00000000 ____D C:\Program Files\RStudio
2016-08-20 20:23 - 2015-04-20 00:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R
2016-08-20 20:23 - 2015-03-11 20:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-08-20 20:23 - 2015-03-11 20:41 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-08-20 20:23 - 2015-01-19 22:31 - 00000000 ___RD C:\Sandbox
2016-08-20 20:23 - 2015-01-19 22:27 - 00000000 ____D C:\Program Files\Sandboxie
2016-08-20 20:23 - 2014-12-19 18:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2016-08-20 20:23 - 2014-12-19 18:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2016-08-20 20:23 - 2014-10-26 14:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-08-20 20:23 - 2014-10-25 22:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-08-20 20:23 - 2013-07-11 12:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HDSDR
2016-08-20 20:23 - 2013-07-08 22:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-08-20 20:23 - 2011-08-29 12:42 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2016-08-20 20:23 - 2011-08-29 12:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Broadcom
2016-08-20 20:23 - 2011-08-29 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2016-08-20 20:23 - 2011-08-29 12:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2016-08-20 20:22 - 2016-07-28 20:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-08-20 20:22 - 2016-05-01 13:59 - 00000000 ____D C:\Program Files (x86)\Asoftech
2016-08-20 20:22 - 2016-04-30 19:08 - 00000000 ___HD C:\Program Files (x86)\DrFoneAndroid_Temp
2016-08-20 20:22 - 2016-04-27 21:53 - 00000000 ____D C:\Program Files (x86)\Samsung
2016-08-20 20:22 - 2016-04-01 21:37 - 00000000 ____D C:\Program Files (x86)\Bonjour
2016-08-20 20:22 - 2016-04-01 19:41 - 00000000 ____D C:\Program Files (x86)\AppGini
2016-08-20 20:22 - 2016-03-22 19:37 - 00000000 ____D C:\Program Files (x86)\K1RFD
2016-08-20 20:22 - 2016-01-02 10:30 - 00000000 ____D C:\Program Files (x86)\Kernel for PDF to Word
2016-08-20 20:22 - 2016-01-02 02:02 - 00000000 ____D C:\Program Files (x86)\PDFZilla
2016-08-20 20:22 - 2016-01-01 23:11 - 00000000 ____D C:\Program Files (x86)\AbleWord
2016-08-20 20:22 - 2015-12-30 20:56 - 00000000 ____D C:\Program Files (x86)\Texmaker
2016-08-20 20:22 - 2015-10-21 22:39 - 00000000 ____D C:\Program Files (x86)\MySoftware
2016-08-20 20:22 - 2015-10-21 22:19 - 00000000 ____D C:\Program Files (x86)\MyCheckBook
2016-08-20 20:22 - 2015-10-19 19:58 - 00000000 ____D C:\Program Files (x86)\Quicken
2016-08-20 20:22 - 2015-05-17 02:43 - 00000000 ____D C:\Program Files (x86)\DeskNow
2016-08-20 20:22 - 2015-03-11 20:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-08-20 20:22 - 2014-10-26 14:22 - 00000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2016-08-20 20:22 - 2014-10-25 20:16 - 00000000 ____D C:\Program Files (x86)\GUM2329.tmp
2016-08-20 20:22 - 2013-07-08 23:18 - 00000000 ____D C:\Program Files (x86)\HDSDR
2016-08-20 20:22 - 2013-07-08 22:56 - 00000000 ____D C:\Program Files (x86)\7-Zip
2016-08-20 20:22 - 2013-06-18 20:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-08-20 20:22 - 2012-04-13 23:22 - 00000000 ____D C:\Program Files (x86)\EaseUS
2016-08-20 20:22 - 2011-08-29 12:27 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-08-20 20:22 - 2011-02-10 09:25 - 00000000 ____D C:\dell
2016-08-20 20:21 - 2015-12-30 20:41 - 00000000 ____D C:\BaKoMa TeX
2016-08-20 20:21 - 2015-07-15 20:37 - 00000000 ____D C:\AdwCleaner
2016-08-20 20:14 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\registration
2016-08-20 20:01 - 2015-10-21 22:39 - 00000000 ____D C:\Users\Public\Documents\Nova
2016-08-20 20:01 - 2014-12-11 16:48 - 00000000 ____D C:\Users\Robin\AppData\Local\Mozilla
2016-08-20 20:00 - 2013-07-09 00:46 - 00000000 ____D C:\Users\fmeadmin\AppData\Local\Mozilla
2016-08-20 19:55 - 2016-04-30 19:08 - 00000000 ____D C:\Users\fme\AppData\Roaming\Wondershare
2016-08-20 19:54 - 2012-02-02 20:41 - 00000000 ____D C:\Users\fme\AppData\Local\Google
2016-08-20 19:53 - 2012-02-02 20:40 - 00000000 ____D C:\Users\fme\AppData\Local\Apps\2.0
2016-08-18 01:34 - 2016-05-01 22:48 - 00000000 ____D C:\Temp
2016-08-17 19:04 - 2016-02-25 23:18 - 00000000 ____D C:\Users\fme\AppData\Temp
2016-08-17 01:37 - 2014-10-26 14:09 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-08-12 13:03 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system
2016-08-10 21:08 - 2016-04-01 23:16 - 00000000 ____D C:\Program Files (x86)\Brilliant Database v10.54B Server 5701
2016-08-10 21:08 - 2016-04-01 23:12 - 00000000 ____D C:\Program Files (x86)\Brilliant Database v10.5 Server 5700
2016-08-10 20:58 - 2016-02-25 19:30 - 00000000 ____D C:\ProgramData\BDLogging
2016-08-10 20:13 - 2009-07-14 00:08 - 00032566 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-08-09 22:54 - 2015-09-12 21:02 - 00003682 _____ C:\Windows\Sandboxie.ini
2016-08-09 00:47 - 2013-01-06 00:31 - 00002048 ____H C:\Users\fme\Documents\Default.rdp
2016-08-09 00:39 - 2009-07-14 00:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-08-07 23:25 - 2016-05-01 22:48 - 00000000 ____D C:\Program Files (x86)\Motorola Mobility
==================== Files in the root of some directories =======
2010-09-25 19:04 - 2010-09-25 19:04 - 0069632 _____ (Elibrium, LLC) C:\Program Files (x86)\Common Files\ClacAdv.dll
2010-09-25 19:04 - 2010-09-25 19:04 - 0126976 _____ (Elibrium, LLC) C:\Program Files (x86)\Common Files\ClacStmp.dll
2010-09-25 19:04 - 2010-09-25 19:04 - 0028672 _____ (Elibrium, Inc) C:\Program Files (x86)\Common Files\MYSWHelpComp.dll
2010-09-25 19:04 - 2010-09-25 19:04 - 0094208 _____ (Avanquest Publishing USA Inc.) C:\Program Files (x86)\Common Files\regdll.dll
2015-01-17 20:00 - 2015-01-17 20:01 - 10395072 _____ (Webroot Software, Inc.) C:\Program Files (x86)\Common Files\wruninstall.exe
2015-09-06 22:20 - 2015-09-06 22:20 - 0000000 _____ () C:\Users\fme\AppData\Roaming\7677.tmp
2015-07-14 00:58 - 2015-07-14 00:58 - 0000000 _____ () C:\Users\fme\AppData\Roaming\E9AD.tmp
2016-01-02 02:02 - 2008-07-07 14:22 - 0000014 _____ () C:\Users\fme\AppData\Roaming\options.ini
2016-01-02 02:02 - 2012-07-07 14:04 - 0000003 _____ () C:\Users\fme\AppData\Roaming\options_pdfcombine.ini
2016-01-02 02:02 - 2013-02-23 13:15 - 0000003 _____ () C:\Users\fme\AppData\Roaming\options_pdfrotator.ini
2016-01-02 02:02 - 2015-08-19 12:07 - 0000701 _____ () C:\Users\fme\AppData\Roaming\pdfsound.dll
2016-01-02 02:02 - 2013-06-09 10:38 - 0000053 _____ () C:\Users\fme\AppData\Roaming\setting.ini
2016-01-02 02:02 - 2016-01-02 02:21 - 0000069 _____ () C:\Users\fme\AppData\Roaming\setup.ini
2016-01-02 02:02 - 2013-06-09 10:30 - 0000043 _____ () C:\Users\fme\AppData\Roaming\setup_pdfcombine.ini
2016-01-02 02:02 - 2013-06-09 11:34 - 0000043 _____ () C:\Users\fme\AppData\Roaming\setup_pdfrotator.ini
2016-04-01 21:39 - 2016-04-01 21:39 - 0000008 ____H () C:\Users\fme\AppData\Local\L8457789130
2015-11-10 21:15 - 2016-09-04 00:02 - 0007598 _____ () C:\Users\fme\AppData\Local\Resmon.ResmonCfg
2015-10-21 22:21 - 2015-10-21 22:21 - 0000103 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
Some files in TEMP:
====================
C:\Users\fme\AppData\Local\Temp\VerizonWirelessUpgradeAssistantUpdate_2.1.4.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-07-17 05:19
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-08-2016
Ran by [removed] (05-09-2016 06:40:59)
Running from C:\Users\[removed]\Desktop\What The Tech
Windows 7 Professional Service Pack 1 (X64) (2011-11-03 23:37:13)
Boot Mode: Safe Mode (minimal)
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-963752047-1521292436-1757112234-500 - Administrator - Disabled)
desknowpostgres (S-1-5-21-963752047-1521292436-1757112234-1011 - Limited - Enabled)
fme (S-1-5-21-963752047-1521292436-1757112234-1006 - Administrator - Enabled) => C:\Users\fme
fmeadmin (S-1-5-21-963752047-1521292436-1757112234-1001 - Administrator - Enabled) => C:\Users\fmeadmin
Guest (S-1-5-21-963752047-1521292436-1757112234-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-963752047-1521292436-1757112234-1002 - Limited - Enabled)
Robin (S-1-5-21-963752047-1521292436-1757112234-1009 - Limited - Enabled) => C:\Users\Robin
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-PDF Split & Merge Version 2.7.0 (Build 176) (HKLM-x32\β¦\7-PDF Split & Merge_is1) (Version: 7-PDF Split & Merge - Version 2.7.0 (Build 176) - 7-PDF, Germany - Thorsten Hodes)
7-Zip 9.38 beta (HKLM-x32\β¦\7-Zip) (Version: - )
AbleWord v3.0 (HKLM-x32\β¦\AbleWord_is1) (Version: - )
Adobe Flash Player 22 ActiveX (HKLM-x32\β¦\Adobe Flash Player ActiveX) (Version: 22.0.0.210 - Adobe Systems Incorporated)
Adobe Flash Player 22 NPAPI (HKLM-x32\β¦\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
AppGini Free Trial Edition version 5.50 (HKLM-x32\β¦\AppGini Free Trial Edition_is1) (Version: 5.50 - BigProf Software)
Asoftech Data Recovery (HKLM-x32\β¦\{1AED6EB7-8FEA-4021-B8FD-EBAA6B21679F}) (Version: 1.00 - )
Auslogics Duplicate File Finder (HKLM-x32\β¦\{6845255F-15CC-4DD1-94D5-D38F370118B3}_is1) (Version: 5.2.1.0 - Auslogics Labs Pty Ltd)
BioAPI Framework (Version: 1.0.1 - Dell Inc.) Hidden
Bonjour (HKLM\β¦\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom NetXtreme-I Netlink Driver and Management Installer (HKLM\β¦\{D6E46FC2-B513-4B7D-8C8C-352F4735C541}) (Version: 12.54.02 - Broadcom Corporation)
CCleaner (HKLM\β¦\CCleaner) (Version: 5.07 - Piriform)
Check Designer (HKLM-x32\β¦\{A5E65B95-F016-474D-BC0D-6AF64412BBDF}) (Version: 14.0.1.0 - Avanquest North America Inc.)
Coolmuster Lab.Fone for Android (HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\Coolmuster Lab.Fone for Android) (Version: 2.2.2.40 - Coolmuster)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell Backup and Recovery Manager (HKLM\β¦\{50B4B603-A4C6-4739-AE96-6C76A0F8A388}) (Version: 1.3.1 - Dell Inc.)
Dell Control Point 64 (Version: 1.6.468.86 - Broadcom Corporation) Hidden
Dell ControlPoint Security Manager (HKLM-x32\β¦\{F4487649-7368-4217-AEA3-1E04DB3E2C5C}) (Version: 1.6.468.86 - Dell Inc.)
Dell Edoc Viewer (HKLM\β¦\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Embassy Trust Suite by Wave Systems (Version: 02.05.04.001 - Wave Systems Corp) Hidden
Dell Security Device Driver Pack (HKLM-x32\β¦\{FF1DDCF4-3A28-4F7F-96D8-E3F4BD1C1702}) (Version: 1.4.056 - Dell Inc.)
Dell System Detect - 1 (HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\73f463568823ebbe) (Version: 6.2.0.5 - Dell)
Dell System Detect (HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\9204f5692a8faf3b) (Version: 3.3.2.1 - Dell)
Dell Touchpad (HKLM\β¦\SynTPDeinstKey) (Version: 14.0.19.0 - Synaptics Incorporated)
DeskNow (HKLM-x32\β¦\DeskNow) (Version: - )
Dropbox (HKLM-x32\β¦\Dropbox) (Version: 9.4.49 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.27.37 - Dropbox, Inc.) Hidden
dupeGuru (HKLM\β¦\{C11DACBD-8863-4AA4-94AD-708602F6F7EF}) (Version: 3.9.1 - Hardcoded Software)
EaseUS MobiSaver for Android version 4.5 (HKLM-x32\β¦\{82D2239C-0F46-4446-B3CA-810A07BF7A6E}_is1) (Version: 4.5 - CHENGDU YIWO Tech Development Co., Ltd.)
EchoLink (HKLM-x32\β¦\{DC33421C-0E1C-470A-BE37-7B7C82677812}) (Version: 2.0.908 - Synergenics, LLC)
EMBASSY Security Center Lite (Version: 04.01.00.044 - Wave Systems Corp) Hidden
EMBASSY Security Center Lite (x32 Version: - ) Hidden
EMBASSY Security Setup (Version: 04.01.00.043 - Wave Systems Corp) Hidden
EMBASSY Security Setup (x32 Version: - ) Hidden
ESC Home Page Plugin (Version: 04.01.00.010 - Wave Systems Corp) Hidden
ESC Home Page Plugin (x32 Version: - ) Hidden
ESET Online Scanner v3 (HKLM-x32\β¦\ESET Online Scanner) (Version: - )
f.lux (HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\Flux) (Version: - )
FileMaker Pro 13 (HKLM-x32\β¦\{EA92821A-03A5-4B00-85F4-834BBD8ABC24}_FileMaker) (Version: 13.0.1.0 - FileMaker, Inc.)
FileMaker Pro 13 (x32 Version: 13.0.1.0 - FileMaker, Inc.) Hidden
Foxit Cloud (HKLM-x32\β¦\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 2.3.25.1124 - Foxit Software Inc.)
Foxit Reader (HKLM-x32\β¦\Foxit Reader_is1) (Version: 7.0.6.1126 - Foxit Software Inc.)
Git version 1.9.5-preview20150319 (HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\Git_is1) (Version: 1.9.5-preview20150319 - The Git Development Community)
GitHub (HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\5f7eb300e2ea4ebf) (Version: 2.13.2.4 - GitHub, Inc.)
Google Chrome (HKLM-x32\β¦\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
Google Earth (HKLM-x32\β¦\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Earth Pro (HKLM-x32\β¦\{35DAA04C-1720-4BE3-A920-A03731EC6A1D}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Google Web Designer (HKLM\β¦\{811767F4-C586-4673-A41F-E9D767497222}) (Version: 1.3.5.0 - Google Inc.)
HDSDR 2.62 (HKLM-x32\β¦\{DB200CBD-9E3E-4C72-B711-B46D6817BC51}_is1) (Version: - DG0JBJ)
Intel(R) Graphics Media Accelerator Driver (HKLM\β¦\HDMI) (Version: 8.15.10.1883 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi Software (HKLM\β¦\{CCAFF072-4DDB-4846-963D-15F02A8E9472}) (Version: 13.00.0000 - Intel Corporation)
Java 7 Update 71 (HKLM-x32\β¦\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Java(TM) 6 Update 45 (64-bit) (HKLM\β¦\{26A24AE4-039D-4CA4-87B4-2F86416045FF}) (Version: 6.0.450 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kernel for PDF to Word ver 11.06.01 (HKLM-x32\β¦\Kernel for PDF to Word_is1) (Version: - Lepide Software Pvt. Ltd.)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\β¦\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 (HKLM\β¦\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Office 365 - en-us (HKLM\β¦\O365HomePremRetail - en-us) (Version: 15.0.4849.1003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\β¦\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft SQL Server 2005 (HKLM-x32\β¦\Microsoft SQL Server 2005) (Version: - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\β¦\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Native Client (HKLM\β¦\{9ACF3FDB-C8E6-444C-8C64-13A221F7BFFD}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server Setup Support Files (English) (HKLM-x32\β¦\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\β¦\{B636C9B9-A3F2-4DCE-ADCC-72E095018385}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\β¦\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\β¦\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\β¦\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\β¦\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\β¦\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\β¦\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\β¦\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\β¦\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\β¦\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\β¦\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\β¦\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\β¦\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\β¦\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\β¦\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Motorola Mobile Drivers Installation 6.4.0 (HKLM\β¦\{27986EDD-C9EC-4B52-B92F-06D073F0AA52}) (Version: 6.4.0 - Motorola Mobility LLC)
Mozilla Firefox 47.0.1 (x86 en-US) (HKLM-x32\β¦\Mozilla Firefox 47.0.1 (x86 en-US)) (Version: 47.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\β¦\MozillaMaintenanceService) (Version: 47.0.1.6018 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\β¦\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\β¦\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\β¦\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\β¦\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyCheckBook (HKLM-x32\β¦\{4729A3D9-F958-4214-A198-ECA9715D47D0}) (Version: 12.0.0 - Avanquest North America Inc.)
NirSoft ProduKey (HKLM-x32\β¦\NirSoft ProduKey) (Version: - )
NTRU TCG Software Stack (Version: 2.1.29 - NTRU Cryptosystems) Hidden
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4849.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4849.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4849.1003 - Microsoft Corporation) Hidden
paint.net (HKLM\β¦\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)
PDFMate PDF Converter 1.7.5 (HKLM-x32\β¦\PDFMate PDF Converter_is1) (Version: - pdfmate.com)
PDFZilla V3.2 (HKLM-x32\β¦\PDFZilla_is1) (Version: - PDFZilla, Inc.)
Preboot Manager (Version: 03.01.00.084 - Wave Systems Corp.) Hidden
Quicken 2015 (HKLM-x32\β¦\{00C2D443-43D9-4550-ABEA-318288E23E57}) (Version: 24.1.8.1 - Intuit)
R for Windows 3.2.0 (HKLM\β¦\R for Windows 3.2.0_is1) (Version: 3.2.0 - R Core Team)
Realtek High Definition Audio Driver (HKLM-x32\β¦\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6015 - Realtek Semiconductor Corp.)
RStudio (HKLM-x32\β¦\RStudio) (Version: 0.98.1103 - RStudio)
Rtools 3.2 (HKLM-x32\β¦\Rtools_is1) (Version: - The R Foundation)
Samsung Kies3 (HKLM-x32\β¦\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16035.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.16035.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung USB Driver for Mobile Phones (HKLM\β¦\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.)
Sandboxie 5.10 (64-bit) (HKLM\β¦\Sandboxie) (Version: 5.10 - Sandboxie Holdings, LLC)
SketchUp Viewer (HKLM-x32\β¦\{819D7380-CA7C-4201-9D60-5BB271491864}) (Version: 16.1.1450 - Trimble Navigation Limited)
Software Upgrade Assistant (HKLM\β¦\{B33BA940-B460-4F02-BFF3-1DDCE7083726}_is1) (Version: 2.1.4 - Motorola Mobility LLC)
TeX Live 2015 (HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\TeXLive2015) (Version: 2015 - )
Texmaker (HKLM-x32\β¦\Texmaker) (Version: - )
TeXstudio 2.10.4 (HKLM-x32\β¦\TeXstudio_is1) (Version: 2.10.4 - Benito van der Zander)
Trusted Drive Manager (Version: 3.3.3.104 - Wave Systems Corp.) Hidden
UltraEdit (HKLM\β¦\{AFFE5F64-3248-41E9-96AE-8B475F6EFAB3}) (Version: 22.20.0.43 - IDM Computer Solutions, Inc.)
UniPDF 1.2 (HKLM-x32\β¦\UniPDF) (Version: 1.2 - UniPDF.com)
UPEK TouchChip Fingerprint Reader (Version: 1.2.0 - Dell Inc.) Hidden
Vibosoft Android Mobile Manager (HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\Vibosoft Android Mobile Manager) (Version: 2.4.154 - Vibosoft)
VisiPics V1.31 (HKLM-x32\β¦\VisiPics_is1) (Version: - Ozone)
VMware Workstation (HKLM-x32\β¦\VMware_Workstation) (Version: 11.1.0 - VMware, Inc)
VMware Workstation (Version: 11.1.0 - VMware, Inc.) Hidden
Wave Infrastructure Installer (Version: 07.65.31.0000 - Wave Systems Corp) Hidden
Wave Support Software (Version: 05.11.00.040 - Wave Systems Corp) Hidden
Wave Support Software (x32 Version: - ) Hidden
Wickr Me (HKLM-x32\β¦\{7668652D-F198-4E7B-8FF4-5E2DC13D9AD7}) (Version: 2.6.0.4 - Wickr Inc.)
WIDCOMM Bluetooth Software (HKLM\β¦\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.100 - Broadcom Corporation)
Windows Driver Package - Dell Inc. PBADRV System (09/11/2009 1.0.1.6) (HKLM\β¦\9512AA21B791B05A54E27065C45BBC417AB282DF) (Version: 09/11/2009 1.0.1.6 - Dell Inc.)
Windows Live Essentials (HKLM-x32\β¦\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\β¦\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Winrad 1.6.1 (HKLM-x32\β¦\{618A02F0-E2C5-4E1B-9D0E-B0282167431D}) (Version: 1.6.1.116 - Winrad.org)
Wondershare Dr.Fone for Android(Build 6.0.3.26) (HKLM-x32\β¦\{1DB91A95-C548-4BA5-9D4C-18C7DEAAC39F}_is1) (Version: 6.0.3.26 - Wondershare Software Co.,Ltd.)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-963752047-1521292436-1757112234-1006_Classes\CLSID\{b5eedee0-c06e-11cf-8c56-444553540000}\InprocServer32 -> C:\Program Files\IDM Computer Solutions\UltraEdit\ue64ctmn.dll ()
CustomCLSID: HKU\S-1-5-21-963752047-1521292436-1757112234-1006_Classes\CLSID\{ca586c80-7c84-4b88-8537-726724df6929}\InprocServer32 -> C:\Users\fme\AppData\Local\Programs\Git\git-cheetah\git_shell_ext64.dll ()
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0A50AAE4-7195-41D2-92C4-34D57DA7A9A7} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-06-14] (Microsoft Corporation)
Task: {13220A81-2B56-4870-B12F-361233B272C1} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-963752047-1521292436-1757112234-1001UA => C:\Users\fmeadmin\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-07-16] (Dropbox, Inc.)
Task: {237B1C6B-16DD-490D-9AA9-D589E50807AC} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-963752047-1521292436-1757112234-1001Core => C:\Users\fmeadmin\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-07-16] (Dropbox, Inc.)
Task: {2AC14B04-40DC-45AF-8B78-58067B96DD8B} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-11-12] (Dropbox, Inc.)
Task: {5002CAA3-3DE5-4816-A97C-B253AEE5AA95} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-963752047-1521292436-1757112234-1006Core => C:\Users\fme\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: {545A8410-F445-4B62-9FBA-582E772902D7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-01] (Piriform Ltd)
Task: {6362E154-9981-4389-8456-838AEE7ECF8F} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-963752047-1521292436-1757112234-1006UA => C:\Users\fme\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: {A3ADB6FA-C595-495D-9CEC-6E068C75BF16} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-07] (Google Inc.)
Task: {A6245DF3-C1D0-4190-BC36-24C700C7A167} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-15] (Adobe Systems Incorporated)
Task: {CE203E49-6048-4FE3-8A21-D3201AD28C96} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2016-07-05] (Microsoft Corporation)
Task: {DAC76429-0D7F-40E1-9315-2BF515284561} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-11-12] (Dropbox, Inc.)
Task: {F5366507-588F-4755-97E7-3126F6B29266} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-06-14] (Microsoft Corporation)
Task: {FEF08AFD-3673-437D-A432-7E60284B268E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-07] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-963752047-1521292436-1757112234-1001Core.job => C:\Users\fmeadmin\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-963752047-1521292436-1757112234-1001UA.job => C:\Users\fmeadmin\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-963752047-1521292436-1757112234-1006Core.job => C:\Users\fme\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-963752047-1521292436-1757112234-1006UA.job => C:\Users\fme\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
Shortcut: C:\Users\fme\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeX Live 2015\TeX Live command-line.lnk -> C:\texlive\2015\tlpkg\installer\tl-cmd.bat ()
Shortcut: C:\Users\fme\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeX Live 2015\Uninstall TeX Live.lnk -> C:\texlive\2015\tlpkg\installer\uninst.bat ()
==================== Loaded Modules (Whitelisted) ==============
2016-07-26 21:54 - 2016-05-24 11:43 - 08909504 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2015-12-01 08:29 - 2015-11-30 22:20 - 00147968 _____ () C:\Program Files\IDM Computer Solutions\UltraEdit\ue64ctmn.dll
2015-04-19 22:52 - 2015-03-19 23:33 - 00736962 _____ () C:\Users\fme\AppData\Local\Programs\Git\git-cheetah\git_shell_ext64.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\fme\Downloads\brilliantdb_server.exe:BDU [0]
AlternateDataStreams: C:\Users\fme\Downloads\brilliantdb_server_beta.exe:BDU [0]
AlternateDataStreams: C:\Users\fme\Downloads\EchoLinkSetup_2_0_908 (1).exe:BDU [0]
AlternateDataStreams: C:\Users\fme\Downloads\EchoLinkSetup_2_0_908 (2).exe:BDU [0]
AlternateDataStreams: C:\Users\fme\Downloads\EchoLinkSetup_2_0_908.exe:BDU [0]
AlternateDataStreams: C:\Users\fme\Downloads\GoogleEarthProSetup.exe:BDU [0]
AlternateDataStreams: C:\Users\fme\Downloads\googlewebdesigner_win.exe:BDU [0]
AlternateDataStreams: C:\Users\fme\Downloads\rdbsetup.exe:BDU [0]
AlternateDataStreams: C:\Users\fme\Downloads\setup-vipre-internet-security.exe:BDU [0]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-963752047-1521292436-1757112234-1006\β¦\dell.com -> dell.com
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 21:34 - 2016-04-16 19:58 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-963752047-1521292436-1757112234-1006\Control Panel\Desktop\\Wallpaper -> C:\Users\fme\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: Media is not connected to internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: AERTFilters => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: EaseUS Agent => 2
MSCONFIG\Services: Guard Agent => 2
MSCONFIG\Services: Live Malware Protection => 2
MSCONFIG\Services: precurioMySQL => 2
MSCONFIG\Services: PrivoxyService => 2
MSCONFIG\Services: ProductAgentService => 2
MSCONFIG\Services: SbieSvc => 2
MSCONFIG\Services: SecureStorageService => 3
MSCONFIG\Services: tcsd_win32.exe => 2
MSCONFIG\Services: TdmService => 2
MSCONFIG\Services: VMAuthdService => 2
MSCONFIG\Services: VMUSBArbService => 2
MSCONFIG\Services: VMwareHostd => 3
MSCONFIG\Services: wlidsvc => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TdmNotify.lnk => C:\Windows\pss\TdmNotify.lnk.CommonStartup
MSCONFIG\startupreg: Akamai NetSession Interface =>
MSCONFIG\startupreg: f.lux => "C:\Users\fme\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
MSCONFIG\startupreg: SandboxieControl => "C:\Program Files\Sandboxie\SbieCtrl.exe"
MSCONFIG\startupreg: Wondershare Helper Compact.exe => "C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelperSetup.exe"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{429E11A8-003A-45C6-A2D5-DE6768EAFBCB}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{89E2118D-F63C-4949-8A9C-CAC843CE6614}] => (Allow) LPort=2869
FirewallRules: [{32142C57-A274-4F3F-B1D0-056516F13117}] => (Allow) LPort=1900
FirewallRules: [{8453B0B7-826D-4D23-B952-616ACAAFE364}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{0C3EAF30-1817-4FB8-90E0-6854BC60ADED}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{D7C85D1E-2DEA-4228-B5E9-EDDF91AB2CC6}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
FirewallRules: [{D9BB2429-0A58-4BB0-A08F-E6C59C33162B}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
FirewallRules: [{3723E9FA-2339-4DB2-BF36-8024DE715303}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{D2B9BDF9-F5AC-467A-8C96-9FF95079749C}] => (Allow) C:\Users\fmeadmin\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{19344E0A-77DB-4471-B5D3-8B99828C17D2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9FF18CB1-9363-4731-8DCD-6FC858B2A9B1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4A2461F7-0457-49B1-8460-EA874542009B}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
FirewallRules: [{F479C2AD-ED26-49D3-864C-CB898B58499D}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
FirewallRules: [{49BD3506-2BCB-4A81-830E-9630BDB57512}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
FirewallRules: [{A90D5780-C39B-4AA0-90EC-B2DA24DFB107}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
FirewallRules: [{1AE6D5CD-97E8-4420-AAD6-A5F6F832F955}] => (Allow) C:\Users\fme\AppData\Roaming\uTorrent\updates\3.4.3_40298.exe
FirewallRules: [{B1B90147-9463-47D6-AB1A-6F895E71F108}] => (Allow) C:\Users\fme\AppData\Roaming\uTorrent\updates\3.4.3_40298.exe
FirewallRules: [{763FEFF5-AD56-4329-A61A-5C540A3B7525}] => (Allow) C:\Users\fme\AppData\Roaming\Vuze Leap\VuzeLeap.exe
FirewallRules: [{0D912352-4DC7-48C3-A4B1-F034549A05ED}] => (Allow) C:\Users\fme\AppData\Roaming\Vuze Leap\VuzeLeap.exe
FirewallRules: [{C92C71C5-AEF6-4FD1-A9AA-A79E485DAE37}] => (Allow) C:\Program Files (x86)\K1RFD\EchoLink\EchoLink.exe
FirewallRules: [{F70D9F2C-6ED2-405A-A209-67039DE544B2}] => (Allow) C:\Program Files (x86)\K1RFD\EchoLink\EchoLink.exe
FirewallRules: [{6A6A0B4D-BA1D-4287-9CE1-42B4C1705986}] => (Allow) C:\Program Files (x86)\K1RFD\EchoLink\EchoLink.exe
FirewallRules: [{28B81E50-EAF4-42EA-858D-4B49BE4EA227}] => (Allow) C:\Program Files (x86)\K1RFD\EchoLink\EchoLink.exe
FirewallRules: [{F814B8E4-ED16-4BCE-BE33-8112A8C80B87}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{EA3C23B5-E01C-4E88-B566-1694651AA00B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{41CDDAC3-719B-4970-B8B6-72CD0032CA07}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{534140B2-DCEE-45B6-A9A6-828D29E36657}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{46E752F4-F85A-4D89-8BDF-F222664BA51B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{DF82F9DC-EDE1-4E8E-8D44-AA130EAC2A44}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
==================== Restore Points =========================
20-08-2016 11:08:31 Windows Update
20-08-2016 11:43:23 Windows Update
20-08-2016 12:13:14 Windows Update
20-08-2016 12:41:43 Windows Update
20-08-2016 19:23:01 Restore Operation
20-08-2016 22:41:00 Windows Update
20-08-2016 22:56:09 Windows Update
21-08-2016 21:17:21 Installed SketchUp Viewer
03-09-2016 23:48:27 Removed iSEEK AnswerWorks English Runtime
==================== Faulty Device Manager Devices =============
Name: VMware VMCI Host Device
Description: VMware VMCI Host Device
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: VMware, Inc.
Service: vmci
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (09/04/2016 12:46:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (09/04/2016 12:45:56 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Users\fme\Desktop\esetsmartinstaller_enu(1).exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (09/04/2016 10:34:09 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (09/03/2016 07:10:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WsAppService.exe, version: 2.2.0.5, time stamp: 0x56fce241
Faulting module name: KERNELBASE.dll, version: 6.1.7601.23418, time stamp: 0x5708a89c
Exception code: 0xe053534f
Fault offset: 0x000000000001a06d
Faulting process id: 0x%9
Faulting application start time: 0xWsAppService.exe0
Faulting application path: WsAppService.exe1
Faulting module path: WsAppService.exe2
Report Id: WsAppService.exe3
Error: (09/03/2016 07:09:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (08/30/2016 09:15:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WsAppService.exe, version: 2.2.0.5, time stamp: 0x56fce241
Faulting module name: KERNELBASE.dll, version: 6.1.7601.23418, time stamp: 0x5708a89c
Exception code: 0xe053534f
Fault offset: 0x000000000001a06d
Faulting process id: 0x%9
Faulting application start time: 0xWsAppService.exe0
Faulting application path: WsAppService.exe1
Faulting module path: WsAppService.exe2
Report Id: WsAppService.exe3
Error: (08/30/2016 09:15:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (08/30/2016 09:06:02 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (08/30/2016 09:06:02 PM) (Source: Microsoft Office 15) (EventID: 2011) (User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0006; CorrelationId: {DD79DC2B-4755-4013-AAC7-085AD2F28ACE}
Error: (08/24/2016 08:35:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WsAppService.exe, version: 2.2.0.5, time stamp: 0x56fce241
Faulting module name: KERNELBASE.dll, version: 6.1.7601.23418, time stamp: 0x5708a89c
Exception code: 0xe053534f
Fault offset: 0x000000000001a06d
Faulting process id: 0x%9
Faulting application start time: 0xWsAppService.exe0
Faulting application path: WsAppService.exe1
Faulting module path: WsAppService.exe2
Report Id: WsAppService.exe3
System errors:
=============
Error: (09/05/2016 06:35:19 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (09/04/2016 12:47:24 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The PnP-X IP Bus Enumerator service depends on the Function Discovery Provider Host service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (09/04/2016 12:46:24 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server:
{D3DCB472-7261-43CE-924B-0704BD730D5F}
Error: (09/04/2016 12:46:24 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (09/04/2016 12:46:24 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server:
{145B4335-FE2A-4927-A040-7C35AD3180EF}
Error: (09/04/2016 12:45:55 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (09/04/2016 12:45:55 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (09/04/2016 12:45:55 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (09/04/2016 12:45:55 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (09/04/2016 12:45:55 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
==================== Memory info ===========================
Processor: Intel(R) Core(TM)2 Solo CPU U3500 @ 1.40GHz
Percentage of memory in use: 64%
Total physical RAM: 4055.29 MB
Available physical RAM: 1423.18 MB
Total Virtual: 8108.77 MB
Available Virtual: 5856.07 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:222.55 GB) (Free:42.12 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 232.9 GB) (Disk ID: B81E8A35)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=10.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=222.5 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================