This is an older computer I recently inherited. I cannot update win 7 and it seems to take forever to load anything.
I have been deleting programs I don't need and just installed Office 2016. It works but does not seem to show up in the All Programs screen.
aswMBR version 1.0.1.2252 Copyright© 2014 AVAST Software
Run date: 2017-01-23 15:00:36
—————————–
15:00:36.309 OS Version: Windows x64 6.1.7601 Service Pack 1
15:00:36.309 Number of processors: 2 586 0x170A
15:00:36.311 ComputerName: CHERYL-LAPTOP UserName: Brad Boyes
15:00:54.558 Initialize success
15:00:54.620 VM: initialized successfully
15:00:54.622 VM: Intel CPU virtualization not supported
15:01:07.029 AVAST engine defs: 17012300
15:01:33.274 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
15:01:33.277 Disk 0 Vendor: Hitachi_ FBEO Size: 238475MB BusType: 3
15:01:33.491 Disk 0 MBR read successfully
15:01:33.494 Disk 0 MBR scan
15:01:33.603 Disk 0 Windows 7 default MBR code
15:01:33.606 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 225246 MB offset 63
15:01:33.612 Disk 0 Boot: NTFS code=1
15:01:33.670 Disk 0 Partition 2 00 27 Hidden NTFS WinRE NTFS 814 MB offset 461305856
15:01:33.866 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 12411 MB offset 462972928
15:01:34.084 Disk 0 scanning C:\Windows\system32\drivers
15:02:21.198 Service scanning
15:03:41.861 Modules scanning
15:03:41.879 Disk 0 trace - called modules:
15:03:41.945 ntoskrnl.exe CLASSPNP.SYS disk.sys hpdskflt.sys iaStor.sys
15:03:41.954 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004cd1060]
15:03:41.963 3 CLASSPNP.SYS[fffff8800180143f] -> nt!IofCallDriver -> [0xfffffa8004cd08e0]
15:03:41.972 5 hpdskflt.sys[fffff880019d1379] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa80047ff050]
15:03:46.493 AVAST engine scan C:\Windows
15:03:54.518 AVAST engine scan C:\Windows\system32
15:15:14.485 AVAST engine scan C:\Windows\system32\drivers
15:16:12.959 AVAST engine scan C:\Users\Brad Boyes
15:47:43.920 AVAST engine scan C:\ProgramData
15:55:59.187 Disk 0 statistics 4827165/0/0 @ 0.92 MB/s
15:55:59.213 Scan finished successfully
19:44:23.767 Disk 0 MBR has been saved successfully to "C:\Users\Brad Boyes\Desktop\MBR.dat"
19:44:23.782 The log file has been saved successfully to "C:\Users\Brad Boyes\Desktop\aswMBR.txt"
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-01-2017
Ran by [removed] (administrator) on CHERYL-LAPTOP (23-01-2017 15:09:10)
Running from C:\Users\[removed]\Desktop
[removed]
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe
(Agere Systems) C:\Program Files\LSI SoftModem\agr64svc.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
() C:\Program Files (x86)\SMINST\BLService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glarysoft\Software Update Pro\SoftwareUpdatePro.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
() C:\Program Files\HP\HP Wireless Comfort Mobile Mouse\TSR\xDaemon.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Mega Limited) C:\Users\Brad Boyes\AppData\Local\MEGAsync\MEGAsync.exe
() C:\Program Files (x86)\SmarThru Office\x64\LegacyLauncher.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
() C:\Program Files (x86)\Hewlett-Packard\Shared\HpqToaster.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glarysoft\Software Update Pro\x64\Win64ShellLink.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
(FooPlayer) C:\Program Files (x86)\FooPlayer\fooplayer.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_24_0_0_194.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_24_0_0_194.exe
(Microsoft Corporation) C:\Windows\System32\cleanmgr.exe
(Microsoft Corporation) C:\Users\Brad Boyes\AppData\Local\Temp\45729C8D-B73B-4D49-AA4E-7BA17609C526\DismHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(AVAST Software) C:\Users\Brad Boyes\Desktop\aswMBR.exe
(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\…\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-03-23] (IDT, Inc.)
HKLM\…\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [178712 2008-04-15] (Intel Corporation)
HKLM\…\Run: [HP Input Device Main Program] => C:\Program Files\HP\HP Wireless Comfort Mobile Mouse\TSR\xDaemon.exe [530432 2008-09-19] ()
HKLM-x32\…\Run: [STO Launcher Service] => C:\Program Files (x86)\SmarThru Office\x64\LegacyLauncher.exe [383488 2008-08-05] ()
HKLM-x32\…\Run: [QlbCtrl.exe] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [320056 2009-06-24] ( Hewlett-Packard Development Company, L.P.)
HKLM-x32\…\Run: [hpWirelessAssistant] => C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752 2008-04-15] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\…\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [67384 2016-10-05] (Apple Inc.)
HKLM-x32\…\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [26287016 2017-01-05] (Dropbox, Inc.)
HKLM-x32\…\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-17] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2016-10-05] (Apple Inc.)
HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\Run: [ApowersoftScreenRecorder] => C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Apowersoft Screen Recorder Pro 2.exe [3614872 2017-01-13] (Apowersoft)
HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\Run: [FooPlayer] => C:\Program Files (x86)\FooPlayer\fooplayer.exe [12040704 2014-06-12] (FooPlayer)
HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\RunOnce: [Uninstall C:\Users\Brad Boyes\AppData\Local\Microsoft\OneDrive\17.3.6386.0412_1\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Brad Boyes\AppData\Local\Microsoft\OneDrive\17.3.6386.0412_1\amd64"
HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\RunOnce: [Uninstall 17.3.6720.1207\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Brad Boyes\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\amd64"
HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\RunOnce: [Uninstall 17.3.6720.1207] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Brad Boyes\AppData\Local\Microsoft\OneDrive\17.3.6720.1207"
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Brad Boyes\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-13] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Brad Boyes\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-13] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Brad Boyes\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-13] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-13] (AVAST Software)
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => -> No File
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Brad Boyes\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-13] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Brad Boyes\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-13] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Brad Boyes\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-13] ()
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.8.0.dll [2017-01-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.8.0.dll [2017-01-05] (Dropbox, Inc.)
Startup: C:\Users\Brad Boyes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2016-06-17]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Brad Boyes\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
GroupPolicy: Restriction - Chrome <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{441002D6-A1DB-4978-BCD7-A289CAB158E6}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{68728956-2AE9-4DA0-83CE-16A76792E389}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-663276297-3394131366-1510214421-1149\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID;=131080549492438408&GUID;=FF2C1CEF-EFF1-4078-98B9-24D49B332A78
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID;=131080549492678422&GUID;=FF2C1CEF-EFF1-4078-98B9-24D49B332A78
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp;=iehome&locale;=en_ca&c;=91&bd;=Pavilion&pf;=cnnb
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ca.yahoo.com
HKU\S-1-5-21-663276297-3394131366-1510214421-1149\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?ocid=OIE9HP
HKU\S-1-5-21-663276297-3394131366-1510214421-1149\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.msn.com/?ocid=OIE9HP
URLSearchHook: HKLM-x32 - (No Name) - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - No File
SearchScopes: HKLM -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=MSSEDF&pc;=MSSE
SearchScopes: HKLM -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=MSSEDF&pc;=MSSE
SearchScopes: HKLM -> {7085EDB1-80AF-415A-929C-825792180222} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&FORM;=HPNTDF
SearchScopes: HKLM -> {D881FE2B-0384-4187-964D-60C714E4C204} URL = hxxp://www.ask.com/web?q={searchTerms}&l;=dis&o;=cahpl
SearchScopes: HKLM-x32 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=MSSEDF&pc;=MSSE
SearchScopes: HKLM-x32 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=MSSEDF&pc;=MSSE
SearchScopes: HKLM-x32 -> {7085EDB1-80AF-415A-929C-825792180222} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&FORM;=HPNTDF
SearchScopes: HKLM-x32 -> {D881FE2B-0384-4187-964D-60C714E4C204} URL = hxxp://www.ask.com/web?q={searchTerms}&l;=dis&o;=cahpl
SearchScopes: HKU\S-1-5-21-663276297-3394131366-1510214421-1149 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=MSSEDF&pc;=MSSE
SearchScopes: HKU\S-1-5-21-663276297-3394131366-1510214421-1149 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=MSSEDF&pc;=MSSE
SearchScopes: HKU\S-1-5-21-663276297-3394131366-1510214421-1149 -> {7085EDB1-80AF-415A-929C-825792180222} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM;=HPNTDF&pc;=HPNTDF&src;=IE-SearchBox
SearchScopes: HKU\S-1-5-21-663276297-3394131366-1510214421-1149 -> {9FF7ED18-11F0-411E-91FB-72CEF1615F09} URL = hxxp://www.bing.com/search?q={searchTerms}&form;=BIE9DF&pc;=BIE9&src;=IE-SearchBox
SearchScopes: HKU\S-1-5-21-663276297-3394131366-1510214421-1149 -> {D881FE2B-0384-4187-964D-60C714E4C204} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-12-28] (Microsoft Corporation)
BHO: No Name -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-28] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll => No File
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2016-12-28] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-12-28] (Microsoft Corporation)
BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-28] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2016-12-28] (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKU\S-1-5-21-663276297-3394131366-1510214421-1149 -> No Name - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
Toolbar: HKU\S-1-5-21-663276297-3394131366-1510214421-1149 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: HKLM-x32 {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/templates/ieawsdc.cab
DPF: HKLM-x32 {36299202-09EF-4ABF-ADB9-47C599DBE778} hxxps://www.hpwindows7upgrade.arvato.com/north_america/Endcustomer/HPProdDetect.cab
DPF: HKLM-x32 {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {87BE3784-6977-4E84-AA08-55A96B9CEAC5} hxxp://67.193.216.99/bl_camera.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\Advisor\System\BAVoilaX.dll [2012-06-01] (Belarc, Inc.)
Handler-x32: http - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2004-01-29] (Microsoft Corporation)
Handler-x32: http - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2004-01-29] (Microsoft Corporation)
Handler-x32: https - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2004-01-29] (Microsoft Corporation)
Handler-x32: https - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2004-01-29] (Microsoft Corporation)
Handler-x32: ipp - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2004-01-29] (Microsoft Corporation)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll No File
Handler-x32: msdaipp - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2004-01-29] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2004-01-29] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll No File
FireFox:
========
FF ProfilePath: C:\Users\Brad Boyes\AppData\Roaming\Mozilla\Firefox\Profiles\cczf6qdl.default-1473981002757 [2017-01-23]
FF Extension: (No Name) - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2016-11-20] [not signed]
FF Extension: (Skype Click to Call) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2016-11-20] [not signed]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-09-13]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-13]
FF HKLM-x32\…\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-04-16] [not signed]
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-10] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] ()
FF Plugin-x32: @DailyBibleGuide.com/Plugin -> C:\Program Files (x86)\DailyBibleGuide\bar\1.bin\NP2vStub.dll [No File]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-12-28] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin-x32: @Motive.com/NpMotive,version=1.0 -> C:\Program Files (x86)\Common Files\Motive\npMotive.dll [No File]
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll [2013-07-23] (Nullsoft, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-04] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-663276297-3394131366-1510214421-1149: @citrixonline.com/appdetectorplugin -> C:\Users\Brad Boyes\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2017-01-17] (Citrix Online)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Brad Boyes\AppData\Local\Google\Chrome\User Data\Default [2017-01-12]
CHR Extension: (Google Docs) - C:\Users\Brad Boyes\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-14]
CHR Extension: (YouTube) - C:\Users\Brad Boyes\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-14]
CHR Extension: (Adobe Acrobat) - C:\Users\Brad Boyes\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-01-10]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Brad Boyes\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-12-14]
CHR Extension: (Gmail) - C:\Users\Brad Boyes\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-14]
CHR Extension: (Chrome Media Router) - C:\Users\Brad Boyes\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-14]
CHR HKLM-x32\…\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [89600 2009-03-02] (Andrea Electronics Corporation)
R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agr64svc.exe [16896 2008-08-26] (Agere Systems)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-13] (AVAST Software)
R3 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3699904 2016-12-28] (Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-05-26] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-05-26] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [51504 2017-01-05] (Dropbox, Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-01-27] (Hewlett-Packard Company) [File not signed]
S3 pfs; C:\Program Files (x86)\PCloud\win_service.exe [100504 2013-11-11] ()
S2 RapportMgmtService; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1882392 2014-05-03] (Trusteer Ltd.)
R2 Recovery Service for Windows; C:\Program Files (x86)\SMINST\BLService.exe [365952 2008-10-06] ()
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe [247808 2010-03-23] (IDT, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 avgfws; "C:\Program Files (x86)\AVG\AVG2012\avgfws.exe" [X]
S4 AVGIDSAgent; "C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe" [X]
S4 avgwd; "C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe" [X]
S3 GameConsoleService; "C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe" [X]
S2 TuneUp.UtilitiesSvc; "C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe" [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-13] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-13] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-13] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-13] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-13] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-13] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-27] (AVAST Software)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [48992 2011-05-23] (AVG Technologies CZ, s.r.o.)
S3 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [124496 2011-12-23] (AVG Technologies CZ, s.r.o. )
S3 AVGIDSFilter; C:\Windows\System32\DRIVERS\avgidsfiltera.sys [29776 2011-12-23] (AVG Technologies CZ, s.r.o. )
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [28480 2012-04-19] (AVG Technologies CZ, s.r.o. )
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [291680 2012-07-26] (AVG Technologies CZ, s.r.o.)
R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [47696 2011-12-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [36944 2012-01-31] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [384352 2012-08-24] (AVG Technologies CZ, s.r.o.)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [53816 2009-02-11] (Samsung Electronics Co., Ltd.)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [54736 2016-10-06] ()
S3 HpGmb001; C:\Windows\System32\DRIVERS\HpGmb001.SYS [14336 2008-08-26] (Primax Electronics Ltd.)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-05-24] (REALiX™)
S3 lgmdbus; C:\Windows\System32\DRIVERS\lgmdbus.sys [115200 2008-07-08] (MCCI Corporation)
R2 npf; C:\Windows\system32\drivers\npf.sys [36600 2015-08-21] (Riverbed Technology, Inc.)
R1 RapportCerberus_59849; C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_59849.sys [606672 2014-02-17] ()
R1 RapportEI64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [299512 2014-05-03] (Trusteer Ltd.)
R0 RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [316312 2014-01-22] (Trusteer Ltd.)
R1 RapportPG64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [414232 2014-05-03] (Trusteer Ltd.)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 rspSanity; C:\Windows\System32\DRIVERS\rspSanity64.sys [29752 2010-08-23] (Resplendence Software Projects Sp.)
R3 RTSUER; C:\Windows\System32\Drivers\RtsUer.sys [413912 2016-05-24] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33960 2016-06-28] (Synaptics Incorporated)
S3 dbx; system32\DRIVERS\dbx.sys [X]
U4 eabfiltr; no ImagePath
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [X]
U3 aswMBR; \??\C:\Users\BRADBO~1\AppData\Local\Temp\aswMBR.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-01-23 15:09 - 2017-01-23 15:14 - 00034996 _____ C:\Users\Brad Boyes\Desktop\FRST.txt
2017-01-23 15:08 - 2017-01-23 15:09 - 00000000 ____D C:\FRST
2017-01-23 14:59 - 2017-01-23 15:00 - 02420736 _____ (Farbar) C:\Users\Brad Boyes\Desktop\FRST64.exe
2017-01-23 14:56 - 2017-01-23 14:56 - 05198336 _____ (AVAST Software) C:\Users\Brad Boyes\Desktop\aswMBR.exe
2017-01-23 14:04 - 2017-01-23 14:04 - 03907384 _____ (Microsoft Corporation) C:\Users\Brad Boyes\Downloads\Setup.X86.en-US_O365HomePremRetail_0a1efd69-c941-433c-a6de-ed52e9335853_TX_PR_(3).exe
2017-01-23 13:06 - 2017-01-23 13:06 - 03907384 _____ (Microsoft Corporation) C:\Users\Brad Boyes\Downloads\Setup.X86.en-US_O365HomePremRetail_0a1efd69-c941-433c-a6de-ed52e9335853_TX_PR_(2).exe
2017-01-23 13:05 - 2017-01-23 13:05 - 03907384 _____ (Microsoft Corporation) C:\Users\Brad Boyes\Downloads\Setup.X86.en-US_O365HomePremRetail_0a1efd69-c941-433c-a6de-ed52e9335853_TX_PR_(1).exe
2017-01-17 17:27 - 2017-01-17 17:27 - 00000000 ____D C:\Users\Brad Boyes\AppData\Roaming\FooPlayer
2017-01-17 14:11 - 2017-01-17 14:11 - 00000000 ____D C:\Users\Brad Boyes\AppData\Local\fontconfig
2017-01-17 14:00 - 2017-01-17 14:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FooPlayer
2017-01-17 14:00 - 2017-01-17 14:00 - 00001110 _____ C:\Users\Public\Desktop\FooPlayer.lnk
2017-01-17 13:59 - 2017-01-17 14:11 - 00000000 ____D C:\Program Files (x86)\FooPlayer
2017-01-17 13:58 - 2017-01-17 13:59 - 18366479 _____ C:\Users\Brad Boyes\Downloads\fooplayer_installer.exe
2017-01-17 13:53 - 2017-01-23 14:26 - 00000592 _____ C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-663276297-3394131366-1510214421-1149.job
2017-01-17 13:53 - 2017-01-23 13:47 - 00000688 _____ C:\Windows\Tasks\G2MUploadTask-S-1-5-21-663276297-3394131366-1510214421-1149.job
2017-01-17 13:53 - 2017-01-17 13:53 - 00003734 _____ C:\Windows\System32\Tasks\G2MUploadTask-S-1-5-21-663276297-3394131366-1510214421-1149
2017-01-17 13:53 - 2017-01-17 13:53 - 00003638 _____ C:\Windows\System32\Tasks\G2MUpdateTask-S-1-5-21-663276297-3394131366-1510214421-1149
2017-01-17 13:52 - 2017-01-17 13:52 - 00000000 ____D C:\Users\Brad Boyes\AppData\Local\Citrix
2017-01-17 13:24 - 2017-01-17 13:24 - 00000000 ____D C:\Users\Brad Boyes\Documents\SMRecorder
2017-01-17 13:23 - 2017-01-17 13:56 - 00000000 ____D C:\Users\Brad Boyes\AppData\Roaming\SMRecorder
2017-01-17 13:18 - 2017-01-17 13:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SMRecorder
2017-01-17 13:18 - 2017-01-17 13:23 - 00000000 ____D C:\Program Files (x86)\SMRecorder
2017-01-17 13:18 - 2017-01-17 13:18 - 00001118 _____ C:\Users\Public\Desktop\SMRecorder.lnk
2017-01-17 13:17 - 2017-01-17 13:17 - 09708011 _____ C:\Users\Brad Boyes\Downloads\smrecorder_installer.exe
2017-01-17 13:08 - 2017-01-17 13:08 - 00001499 _____ C:\Users\Public\Desktop\Apowersoft Screen Recorder Pro.lnk
2017-01-17 13:05 - 2017-01-17 13:06 - 17215368 _____ (APOWERSOFT LIMITED ) C:\Users\Brad Boyes\Downloads\screen-recorder-pro.exe
2017-01-17 12:26 - 2016-09-14 12:55 - 21543568 _____ C:\Windows\MSYH.tt2
2017-01-17 12:26 - 2016-09-14 12:55 - 21302624 _____ C:\Windows\MSJH.tt2
2017-01-17 12:26 - 2016-09-14 12:55 - 14381616 _____ C:\Windows\MSYHBD.tt2
2017-01-17 12:26 - 2016-09-14 12:55 - 14343024 _____ C:\Windows\MSJHBD.tt2
2017-01-17 12:19 - 2017-01-17 12:19 - 03907384 _____ (Microsoft Corporation) C:\Users\Brad Boyes\Downloads\Setup.X86.en-US_O365HomePremRetail_0a1efd69-c941-433c-a6de-ed52e9335853_TX_PR_.exe
2017-01-11 09:24 - 2017-01-16 12:53 - 00000000 ____D C:\Users\Brad Boyes\AppData\Roaming\FreeTelly
2017-01-11 09:21 - 2017-01-17 12:23 - 00000000 ____D C:\Program Files (x86)\FreeTelly
2017-01-11 09:06 - 2017-01-13 11:26 - 00000038 _____ C:\Windows\SysWOW64\Error.ini
2017-01-10 21:03 - 2017-01-10 21:03 - 00005903 _____ C:\Users\Brad Boyes\Documents\playercorefactory.xml
2017-01-10 20:46 - 2017-01-10 20:47 - 00000000 ____D C:\Users\Brad Boyes\Documents\MEGAsync Downloads
2017-01-10 20:46 - 2017-01-10 20:46 - 00000000 ____D C:\Users\Brad Boyes\Documents\MEGAsync
2017-01-10 20:38 - 2017-01-10 20:38 - 03209272 _____ C:\Users\Brad Boyes\Downloads\plan_FreSemTru.rar
2017-01-10 20:34 - 2017-01-10 21:54 - 71753517 _____ C:\Users\Brad Boyes\Downloads\FreeTellyWin.zip
2017-01-10 20:27 - 2017-01-05 13:55 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-01-10 20:27 - 2017-01-05 13:55 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-01-10 20:27 - 2017-01-05 13:52 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-01-10 20:27 - 2017-01-05 13:52 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-01-10 20:27 - 2017-01-05 12:43 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-01-10 20:27 - 2017-01-05 12:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-01-10 20:27 - 2017-01-05 12:43 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-01-10 20:27 - 2017-01-05 12:43 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-01-10 20:27 - 2017-01-05 12:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-01-10 20:27 - 2017-01-05 12:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-01-10 20:27 - 2017-01-05 12:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-01-10 20:27 - 2017-01-05 12:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-01-10 20:27 - 2017-01-05 12:43 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-01-10 20:27 - 2017-01-05 12:43 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-01-10 20:27 - 2017-01-05 12:43 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-01-10 20:27 - 2017-01-05 12:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-01-10 20:27 - 2017-01-05 12:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-01-10 20:27 - 2017-01-05 12:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-01-10 20:27 - 2017-01-05 12:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-01-10 20:27 - 2017-01-05 12:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-01-10 20:27 - 2017-01-05 12:32 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-01-10 20:27 - 2017-01-05 12:25 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-01-10 20:27 - 2017-01-05 12:24 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-01-10 20:27 - 2017-01-05 12:24 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-01-10 20:27 - 2017-01-05 12:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-01-10 20:27 - 2017-01-05 12:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-01-10 20:27 - 2017-01-05 12:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-01-10 20:15 - 2017-01-10 20:15 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-10 16:46 - 2017-01-10 16:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-01-05 19:04 - 2017-01-05 19:04 - 00051504 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2017-01-05 18:48 - 2017-01-05 18:48 - 00075888 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2017-01-05 18:48 - 2017-01-05 18:48 - 00075888 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2017-01-05 18:48 - 2017-01-05 18:48 - 00075888 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2017-01-04 19:00 - 2017-01-04 19:00 - 00003440 _____ C:\Windows\System32\Tasks\SoftwareUpdate Pro
2017-01-04 19:00 - 2017-01-04 19:00 - 00001338 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Software Update Pro.lnk
2017-01-04 19:00 - 2017-01-04 19:00 - 00001326 _____ C:\Users\Public\Desktop\Software Update Pro.lnk
2017-01-04 18:58 - 2017-01-04 18:58 - 18004592 _____ C:\Users\Brad Boyes\Downloads\mhsetup(1).exe
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-01-23 15:01 - 2016-05-26 13:38 - 00000916 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2017-01-23 15:00 - 2012-04-05 07:50 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-01-23 14:16 - 2009-09-07 14:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-01-23 10:59 - 2016-05-26 13:38 - 00000912 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2017-01-23 02:09 - 2010-03-31 16:20 - 00000442 _____ C:\Windows\Tasks\ParetoLogic Update Version2.job
2017-01-22 18:00 - 2010-03-31 16:21 - 00000468 _____ C:\Windows\Tasks\ParetoLogic Registration.job
2017-01-21 11:35 - 2016-12-15 11:04 - 00003192 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
2017-01-21 11:35 - 2016-05-26 13:36 - 00000000 ___RD C:\Users\Brad Boyes\OneDrive
2017-01-21 11:35 - 2016-05-23 08:20 - 00002176 _____ C:\Users\Brad Boyes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2017-01-20 00:29 - 2016-05-27 11:50 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-01-18 20:12 - 2010-04-16 10:06 - 00011440 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-18 20:12 - 2010-04-16 10:06 - 00011440 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-18 19:15 - 2016-11-20 21:47 - 00000000 ____D C:\Users\Brad Boyes\AppData\LocalLow\Mozilla
2017-01-17 13:49 - 2016-05-06 10:24 - 00000000 ____D C:\Users\Brad Boyes\AppData\Local\CrashDumps
2017-01-17 13:48 - 2016-09-13 18:48 - 00000000 ____D C:\Users\Brad Boyes\AppData\Roaming\Wise Uninstaller
2017-01-17 13:09 - 2016-09-23 14:29 - 00000000 ____D C:\Users\Brad Boyes\Documents\Apowersoft
2017-01-17 13:08 - 2016-09-23 14:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apowersoft
2017-01-17 13:07 - 2016-09-23 14:27 - 00000000 ____D C:\Program Files (x86)\Apowersoft
2017-01-17 13:07 - 2016-09-23 14:22 - 00000000 ____D C:\Users\Brad Boyes\AppData\Roaming\Apowersoft
2017-01-17 13:07 - 2009-09-07 14:53 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2017-01-17 12:56 - 2016-09-14 14:01 - 00002431 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-01-17 12:41 - 2016-05-03 17:38 - 00000000 ____D C:\Users\Brad Boyes\AppData\Local\Hewlett-Packard
2017-01-17 12:41 - 2016-05-03 17:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2017-01-17 12:41 - 2008-11-03 19:07 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2017-01-17 12:35 - 2008-11-03 19:55 - 00000000 ____D C:\ProgramData\Temp
2017-01-17 12:33 - 2016-09-25 18:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glarysoft
2017-01-17 12:33 - 2016-09-25 18:43 - 00000000 ____D C:\ProgramData\Glarysoft
2017-01-17 09:29 - 2016-09-13 20:52 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2017-01-13 19:35 - 2016-06-14 14:35 - 00013764 _____ C:\Users\Brad Boyes\AppData\Roaming\wklnhst.dat
2017-01-13 11:26 - 2016-05-27 11:13 - 00000000 ___RD C:\Users\Brad Boyes\Dropbox
2017-01-13 11:23 - 2010-04-22 14:56 - 00000326 _____ C:\Windows\Tasks\GlaryInitialize.job
2017-01-13 09:04 - 2016-09-14 12:57 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-01-13 08:48 - 2009-07-14 00:13 - 00834722 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-13 08:48 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\inf
2017-01-13 08:43 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-11 09:10 - 2016-09-25 18:41 - 00000000 ____D C:\Users\Brad Boyes\AppData\Roaming\GlarySoft
2017-01-11 04:24 - 2016-12-15 05:39 - 00000000 ____D C:\Windows\rescache
2017-01-11 03:33 - 2016-05-26 13:37 - 00000000 ____D C:\Program Files (x86)\Dropbox
2017-01-10 18:01 - 2012-04-05 07:50 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-01-10 18:01 - 2012-04-05 07:50 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-01-10 18:01 - 2011-05-14 00:53 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-01-10 18:00 - 2011-04-22 10:36 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-10 18:00 - 2008-11-03 19:53 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-01-04 19:00 - 2016-09-25 18:43 - 00000000 ____D C:\Program Files (x86)\Glarysoft
2017-01-04 19:00 - 2016-09-25 18:42 - 00004096 _____ C:\GUDownLoaddebug.txt
2017-01-04 17:48 - 2013-04-01 12:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2017-01-04 17:41 - 2010-02-04 21:44 - 00003330 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-01-04 17:40 - 2010-02-04 21:44 - 00003202 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
==================== Files in the root of some directories =======
2016-08-08 13:19 - 2016-08-08 13:19 - 7065600 _____ () C:\Program Files (x86)\GUT7520.tmp
2013-04-01 12:12 - 2013-04-01 12:16 - 4126720 _____ () C:\Program Files (x86)\GUT9107.tmp
2010-09-17 08:45 - 2002-07-26 16:02 - 0153088 _____ () C:\Program Files (x86)\UNWISE.EXE
2016-09-23 22:11 - 2016-09-23 22:11 - 0000106 _____ () C:\Users\Brad Boyes\AppData\Roaming\Camdata.ini
2016-09-23 22:11 - 2016-09-23 22:11 - 0000408 _____ () C:\Users\Brad Boyes\AppData\Roaming\CamLayout.ini
2016-09-23 22:11 - 2016-09-23 22:11 - 0000408 _____ () C:\Users\Brad Boyes\AppData\Roaming\CamShapes.ini
2016-09-23 14:36 - 2016-09-23 14:36 - 0000096 _____ () C:\Users\Brad Boyes\AppData\Roaming\version2.xml
2016-06-14 14:35 - 2017-01-13 19:35 - 0013764 _____ () C:\Users\Brad Boyes\AppData\Roaming\wklnhst.dat
2016-05-11 17:01 - 2016-05-11 17:01 - 0000000 _____ () C:\Users\Brad Boyes\AppData\Local\AtStart.txt
2016-05-11 17:01 - 2016-05-11 17:01 - 0000000 _____ () C:\Users\Brad Boyes\AppData\Local\DSwitch.txt
2016-05-18 21:30 - 2016-05-18 21:30 - 0000036 _____ () C:\Users\Brad Boyes\AppData\Local\housecall.guid.cache
2016-05-11 17:01 - 2016-05-11 17:01 - 0000000 _____ () C:\Users\Brad Boyes\AppData\Local\QSwitch.txt
2016-12-14 19:11 - 2016-12-14 19:11 - 0007597 _____ () C:\Users\Brad Boyes\AppData\Local\Resmon.ResmonCfg
2016-05-03 17:28 - 2016-05-03 17:28 - 0000000 _____ () C:\Users\Brad Boyes\AppData\Local\{D9BAE1C4-0B25-4F2F-AC13-20EC50E7E0DB}
2011-04-19 18:25 - 2011-02-18 18:25 - 0000032 ____R () C:\ProgramData\hash.dat
2014-02-17 20:24 - 2014-02-17 20:24 - 0000119 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2014-02-05 14:39 - 2014-01-24 22:43 - 4911888 _____ (PC Cleaners) C:\ProgramData\pclunst.exe
2013-05-23 18:05 - 2013-05-23 18:05 - 3856932 _____ () C:\ProgramData\SamPCFax00000C780000
2012-11-19 14:29 - 2012-11-20 09:59 - 0000824 _____ () C:\ProgramData\SharedProperties.xml
Files to move or delete:
====================
C:\ProgramData\hash.dat
C:\ProgramData\pclunst.exe
Some files in TEMP:
====================
2017-01-17 13:22 - 1998-09-25 13:16 - 0270848 _____ () C:\Users\Brad Boyes\AppData\Local\Temp\GLB1A2B.EXE
2007-11-07 16:15 - 2007-11-07 16:15 - 1821192 _____ (Microsoft Corporation) C:\Users\Brad Boyes\AppData\Local\Temp\redist.exe
2007-11-07 16:15 - 2007-11-07 16:15 - 1821192 _____ (Microsoft Corporation) C:\Users\Brad Boyes\AppData\Local\Temp\smd_runtime.exe
2017-01-17 13:48 - 2008-07-24 03:34 - 0455600 _____ (Macrovision Corporation) C:\Users\Brad Boyes\AppData\Local\Temp\_is8F7.exe
2017-01-17 13:49 - 2008-07-24 03:34 - 0455600 _____ (Macrovision Corporation) C:\Users\Brad Boyes\AppData\Local\Temp\_isA68D.exe
2014-02-07 10:10 - 2003-01-14 13:00 - 0509984 _____ (Microsoft Corporation) C:\Users\Cheryl\AppData\Local\Temp\50comupd.exe
2013-12-05 13:12 - 2013-08-16 13:56 - 0026688 _____ (Foxit Corporation) C:\Users\Cheryl\AppData\Local\Temp\Checkupdate.exe
2013-12-05 13:12 - 2013-12-17 17:14 - 9580608 _____ (Foxit Corporation) C:\Users\Cheryl\AppData\Local\Temp\Foxit Reader Updater.exe
2013-12-13 15:15 - 2013-10-22 14:42 - 9577536 _____ (Foxit Corporation) C:\Users\Cheryl\AppData\Local\Temp\Foxit Updater.exe
2013-12-05 13:12 - 2013-08-16 13:56 - 0216064 _____ () C:\Users\Cheryl\AppData\Local\Temp\gcapi_dll.dll
2013-12-05 13:12 - 2013-08-16 13:56 - 0073408 _____ () C:\Users\Cheryl\AppData\Local\Temp\gtapi_signed.dll
2013-12-08 22:34 - 2014-01-15 16:31 - 0035224 _____ () C:\Users\Cheryl\AppData\Local\Temp\i4jdel0.exe
2014-01-22 13:08 - 2014-01-22 13:08 - 1069512 _____ (Solid State Networks) C:\Users\Cheryl\AppData\Local\Temp\install_flashplayer12x32au_mssd_aaa_aih.exe
2014-01-22 13:52 - 2014-01-22 13:52 - 1069512 _____ (Solid State Networks) C:\Users\Cheryl\AppData\Local\Temp\install_flashplayer12x32au_mssd_aaa_aih_1.exe
2014-01-29 13:41 - 2014-01-29 13:41 - 1069512 _____ (Solid State Networks) C:\Users\Cheryl\AppData\Local\Temp\install_flashplayer12x32au_mssd_aaa_aih_2.exe
2014-01-29 13:46 - 2014-01-29 13:46 - 1069512 _____ (Solid State Networks) C:\Users\Cheryl\AppData\Local\Temp\install_flashplayer12x32au_mssd_aaa_aih_3.exe
2014-01-15 14:00 - 2014-01-15 14:01 - 41655792 _____ () C:\Users\Cheryl\AppData\Local\Temp\raptrpatch.exe
2014-01-22 13:57 - 2014-01-22 13:57 - 0904272 _____ (BitTorrent Inc.) C:\Users\Cheryl\AppData\Local\Temp\utt6392.tmp.exe
2001-12-19 11:45 - 2001-12-19 11:45 - 0023552 _____ () C:\Users\Cheryl\AppData\Local\Temp\VCdControlTool.exe
Some zero byte size files/folders:
==========================
C:\Windows\SysWOW64\NlsLexicons004e.dll
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-01-23 00:49
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-01-2017
Ran by [removed] (23-01-2017 15:16:02)
Running from C:\Users\[removed]\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2010-04-16 20:11:05)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-663276297-3394131366-1510214421-500 - Administrator - Disabled)
ASPNET (S-1-5-21-663276297-3394131366-1510214421-1002 - Limited - Enabled)
Brad Boyes (S-1-5-21-663276297-3394131366-1510214421-1149 - Administrator - Enabled) => C:\Users\Brad Boyes
Cheryl (S-1-5-21-663276297-3394131366-1510214421-1000 - Administrator - Enabled) => C:\Users\Cheryl
Guest (S-1-5-21-663276297-3394131366-1510214421-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-663276297-3394131366-1510214421-1034 - Limited - Enabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 16.02 (HKLM-x32\…\7-Zip) (Version: 16.02 - Igor Pavlov)
Acrobat.com (HKLM-x32\…\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)
Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Activation Assistant for the 2007 Microsoft Office suites (x32 Version: 1.0 - Microsoft Corporation) Hidden
ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.2 - Hewlett-Packard) Hidden
Adobe Acrobat Reader DC (HKLM-x32\…\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.023.20056 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\…\Adobe AIR) (Version: 23.0.0.257 - Adobe Systems Incorporated)
Adobe Digital Editions 2.0 (HKLM-x32\…\Adobe Digital Editions 2.0) (Version: 2.0 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\…\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
Adobe Flash Player 24 ActiveX (HKLM-x32\…\Adobe Flash Player ActiveX) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\…\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Agere Systems HDA Modem (HKLM\…\Agere Systems Soft Modem) (Version: - LSI Corporation)
Apowersoft Online Launcher version 1.4.4 (HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\{20BF67A8-D81A-4489-8225-FABAA0896E2D}_is1) (Version: 1.4.4 - APOWERSOFT LIMITED)
Apowersoft Screen Recorder Pro V2.1.8 (HKLM-x32\…\{dc9006db-6b05-4f0f-833b-79ef3f284c24}_is1) (Version: 2.1.8 - APOWERSOFT LIMITED)
Apple Application Support (32-bit) (HKLM-x32\…\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\…\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\…\Avast) (Version: 12.3.2280 - AVAST Software)
AVG 2012 (Version: 12.0.2221 - AVG Technologies) Hidden
AVG 2012 (Version: 12.0.2441 - AVG Technologies) Hidden
Bonjour (HKLM\…\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCScore (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
Citrix Online Launcher (HKLM-x32\…\{CC8F903A-9698-4245-9A38-22412DEF1029}) (Version: 1.0.446 - Citrix)
Compatibility Pack for the 2007 Office system (HKLM-x32\…\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM-x32\…\Dropbox) (Version: 17.4.33 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.57.1 - Dropbox, Inc.) Hidden
ESSBrwr (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
ESSCDBK (x32 Version: 8.03.0000.0001 - EASTMAN KODAK Company) Hidden
ESScore (x32 Version: 8.03.0000.0001 - EASTMAN KODAK Company) Hidden
ESSgui (x32 Version: 8.03.0000.0001 - EASTMAN KODAK Company) Hidden
ESSini (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
ESSPCD (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
ESSPDock (x32 Version: 6.03.0001.0004 - EASTMAN KODAK Company) Hidden
ESSTOOLS (x32 Version: 5.00.0000.0004 - EASTMAN KODAK Company) Hidden
essvatgt (x32 Version: 8.00.0000.0001 - EASTMAN KODAK Company) Hidden
ESU for Microsoft Vista (HKLM-x32\…\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
FooPlayer 2.2.8 (HKLM-x32\…\FooPlayer) (Version: 2.2.8 - FooPlayer)
Google Chrome (HKLM-x32\…\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Drive (HKLM-x32\…\{07A12123-B717-496B-B471-48AF6407B433}) (Version: 1.32.4066.7445 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
GoToMeeting 7.30.0.6140 (HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\GoToMeeting) (Version: 7.30.0.6140 - CitrixOnline)
HP Doc Viewer (HKLM-x32\…\{082702D5-5DD8-4600-BCE5-48B15174687F}) (Version: 1.03.0001 - Hewlett-Packard)
HP MediaSmart DVD (HKLM-x32\…\InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}) (Version: 3.1.3719 - Hewlett-Packard)
HP MediaSmart SmartMenu (HKLM\…\{889450B1-87C5-4A38-B766-DBBC9845EABE}) (Version: 2.1.8 - Hewlett-Packard)
HP MediaSmart Webcam (HKLM-x32\…\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.2.1621 - Hewlett-Packard)
HP MULTIPLE MODEM INSTALLER for VISTA (HKLM-x32\…\{45A136EC-88BF-4B95-99F5-C45D3930E1CC}) (Version: 1.0.0.30 - Hewlett Packard)
HP Product Detection (HKLM-x32\…\{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}) (Version: 10.7.8.0 - Hewlett-Packard Company)
HP Quick Launch Buttons (HKLM-x32\…\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.3.1 - Hewlett-Packard)
HP Support Solutions Framework (HKLM-x32\…\{CE7447C2-EF12-4EF3-BE51-BFC3B049C0F6}) (Version: 12.5.32.203 - HP)
HP Total Care Advisor (HKLM-x32\…\{F31E534B-4199-4552-8154-5C130710D68E}) (Version: 2.4.6651.2902 - Hewlett-Packard)
HP Wireless Assistant (HKLM-x32\…\{9ADABDDE-9644-461B-9E73-83FA3EFCAB50}) (Version: 3.00 K2 - Hewlett-Packard)
HP Wireless Comfort Mobile Mouse (HKLM-x32\…\{AA8B2587-7198-44E6-858D-20EA0E833C9D}) (Version: 1.0.0.1 - HP)
HPAsset component for HP Active Support Library (x32 Version: 3.0.2.2 - Hewlett-Packard) Hidden
iCloud (HKLM\…\{29AAC3D3-23FC-496D-8266-0E3833686758}) (Version: 6.0.2.10 - Apple Inc.)
IDT Audio (HKLM-x32\…\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6225.0 - IDT)
Intel(R) Graphics Media Accelerator Driver (HKLM\…\HDMI) (Version: - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\…\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation)
Itibiti RTC (x32 Version: 0.0.1 - Itibiti Inc) Hidden <==== ATTENTION
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
LG MC USB U330 driver (HKLM-x32\…\{ABD7DBE3-E344-4BCA-B8AD-4360494DD1D9}) (Version: 1.0.0.0000 - LG Electronics)
LG PC Suite II (HKLM-x32\…\{14DCD95A-EBA3-4BF0-B7EF-533852E99BE6}) (Version: 2.00.0000 - LG PC Suite)
LG PC Suite II (x32 Version: 2.00.0000 - LG PC Suite) Hidden
LightScribe System Software (HKLM-x32\…\{4A9849CA-E11C-4F24-8BB1-97C717A1C898}) (Version: 1.18.1.1 - LightScribe)
Macromedia Shockwave Player (HKLM-x32\…\Macromedia Shockwave Player) (Version: - )
MEGAsync (HKLM-x32\…\MEGAsync) (Version: - Mega Limited)
Microsoft .NET Framework 1.1 (HKLM-x32\…\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.6.1 (HKLM\…\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Baseline Security Analyzer 2.2 (HKLM\…\{08C3441C-4FAF-48D3-A551-70DD6031734F}) (Version: 2.2.2170 - Microsoft Corporation)
Microsoft Digital Image Standard 2006 (HKLM-x32\…\PictureItPrem_v11) (Version: 11.0.0422 - Microsoft Corporation)
Microsoft Location Finder (HKLM-x32\…\{9D18F7F8-B984-4249-8512-CC621BC59F12}) (Version: 1.2.0 - Microsoft Corporation)
Microsoft Office 365 - en-us (HKLM\…\O365HomePremRetail - en-us) (Version: 16.0.7571.2109 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\…\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\…\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft Silverlight (HKLM\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\…\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\…\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\…\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\…\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\…\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\…\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\…\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\…\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\…\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\…\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\…\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\…\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\…\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\…\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\…\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Works (HKLM-x32\…\{6D52C408-B09A-4520-9B18-475B81D393F1}) (Version: 08.05.0818 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 50.1.0 (x86 en-US) (HKLM-x32\…\Mozilla Firefox 50.1.0 (x86 en-US)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\…\MozillaMaintenanceService) (Version: 50.1.0.6186 - Mozilla)
Mozilla Thunderbird 45.3.0 (x86 en-US) (HKLM-x32\…\Mozilla Thunderbird 45.3.0 (x86 en-US)) (Version: 45.3.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\…\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\…\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\…\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Multiple Image Resizer .NET 4 (x32 Version: 4.0.0.5 - Acumen Business Systems Ltd) Hidden
netbrdg (x32 Version: 7.01.0000.0001 - EASTMAN KODAK Company) Hidden
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.7571.2109 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.7571.2109 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7571.2109 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7571.2109 - Microsoft Corporation) Hidden
OfotoXMI (x32 Version: 8.03.0000.0001 - EASTMAN KODAK Company) Hidden
PowerDirector (x32 Version: 7.0.2119 - CyberLink Corp.) Hidden
QLBCASL (x32 Version: 6.40.17.2 - Hewlett-Packard) Hidden
QuickTime 7 (HKLM-x32\…\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Rapport (x32 Version: 3.5.1304.46 - Trusteer) Hidden
Realtek 8169 8168 8101E 8102E Ethernet Driver (HKLM-x32\…\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)
Realtek Card Reader (HKLM-x32\…\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31222 - Realtek Semiconduct Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\…\{DC24971E-1946-445D-8A82-CE685433FA7D}) (Version: 3.0.1.3 - Realtek Semiconductor Corp.)
RPS CRT (x32 Version: 8.0.34 - Bell) Hidden
RPS CRT (x32 Version: 9.0.40 - Bell) Hidden
RPS CRT (x32 Version: 9.0.58 - Bell) Hidden
SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden
Samsung SCX-4x26 Series (HKLM-x32\…\Samsung SCX-4x26 Series) (Version: - Samsung Electronics CO.,LTD)
SFR (x32 Version: 8.01.0000.0001 - Eastman Kodak Company) Hidden
SHASTA (x32 Version: 7.01.0000.0001 - EASTMAN KODAK Company) Hidden
skin0001 (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
SKINXSDK (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
SmarThru Office (HKLM-x32\…\{9BC1E722-AE07-46A3-B7A6-556DBE18E22A}) (Version: 2.0 - Samsung)
SmarThru Office PC Fax (HKLM-x32\…\SmarThru Office PC Fax) (Version: - )
SMRecorder 1.3.2 (HKLM-x32\…\SMRecorder) (Version: 1.3.2 - SMRecorder)
Software Update Pro 5.42.0.36 (HKLM-x32\…\Software Update Pro) (Version: 5.42.0.36 - Glarysoft Ltd)
Spelling Dictionaries Support For Adobe Reader 9 (HKLM-x32\…\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
staticcr (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
StyleWriter 4 (HKLM-x32\…\{D7F86849-35EA-44D3-AD69-2D666A5CD0C5}) (Version: 4.0.4.10 - Editor Software (UK) Ltd)
Synaptics Pointing Device Driver (HKLM\…\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated)
Tracker (HKLM-x32\…\com.elance.tracker) (Version: 2.3.3 - Elance Inc)
Tracker (x32 Version: 2.3.3 - Elance Inc) Hidden
Trusteer Endpoint Protection (HKLM-x32\…\Rapport_msi) (Version: 3.5.1304.46 - Trusteer)
TuneUp Utilities 2014 (en-US) (x32 Version: 14.0.1000.353 - TuneUp Software) Hidden
TuneUp Utilities 2014 (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden
Tweaking.com - Windows Repair (HKLM-x32\…\Tweaking.com - Windows Repair) (Version: 3.9.12 - Tweaking.com)
UltraPlayer (HKLM-x32\…\{7FF95D80-7FEA-11D3-BDE9-0050DA1AB3B9}) (Version: - )
UnzipLite 0.8.0.0 (HKLM-x32\…\UnzipLite) (Version: 0.8.0.0 - Amnis Technology Ltd)
Upwork version 4.1.351.0 (HKLM-x32\…\{F8678797-5A4B-43CF-88D0-EEF67DB3B55E}_is1) (Version: 4.1.351.0 - Upwork, Inc)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Video Download Capture V6.0.8 (HKLM-x32\…\{b3336f66-e079-4ff6-abdb-51e2fab781d5}_is1) (Version: 6.0.8 - APOWERSOFT LIMITED)
VIO Player version 1.0.1 (HKLM-x32\…\{C8A17598-7F89-41EA-9876-0F89DA0B24F1}_is1) (Version: 1.0.1 - VIO)
Visual Studio 2008 x64 Redistributables (HKLM-x32\…\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
VPRINTOL (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
Winamp (HKLM-x32\…\Winamp) (Version: 5.65 - Nullsoft, Inc)
Windows Driver Package - ENE (enecir) HIDClass (09/04/2008 2.6.0.0) (HKLM\…\07B260955637F1FF7587ED2AA87459040DD09BF7) (Version: 09/04/2008 2.6.0.0 - ENE)
Windows Live Essentials (HKLM-x32\…\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\…\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\…\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WIRELESS (x32 Version: 8.02.0000.0001 - EASTMAN KODAK Company) Hidden
Wise Program Uninstaller 1.97 (HKLM-x32\…\Wise Program Uninstaller_is1) (Version: 1.97 - WiseCleaner.com, Inc.)
Works Upgrade (x32 Version: 8.0.0.0000 - Microsoft Corporation) Hidden
Your Uninstaller! 7 (HKLM-x32\…\YU2010_is1) (Version: 7.5.2014.3 - URSoft, Inc.)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-663276297-3394131366-1510214421-1149_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Brad Boyes\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\amd64\FileCoAuthLib64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-663276297-3394131366-1510214421-1149_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\Brad Boyes\AppData\Local\Citrix\GoToMeeting\6140\G2MOutlookAddin64.dll (Citrix Online, a division of Citrix Systems, Inc.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {06CC64AE-DAB0-4AC0-8ED0-89BE2E6F90F2} - System32\Tasks\ParetoLogic Registration => Rundll32.exe "C:\Program Files (x86)\Common Files\ParetoLogic\UUS2\UUS.dll" RunUns
Task: {0F1ABBF1-884C-44E4-A372-B6CA6F3C1B42} - System32\Tasks\{8EC1B3C7-93B5-4B39-8DB2-86E9D7C2D54F} => C:\Program Files (x86)\Quicken\qw.exe
Task: {16A0760F-731A-4EC4-AB0C-D4BB2F98B81F} - System32\Tasks\SafeZone scheduled Autoupdate 1473818608 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
Task: {1D2E486C-61E6-479A-A7A9-1E1F25D4CB63} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-12-21] (HP Inc.)
Task: {20BC705B-A0FC-43FB-BCC1-43970D750B2A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
Task: {2535AB2E-5F84-4692-ADD5-6FAED2276E68} - System32\Tasks\IHSelfDeleteTASK => /C DEL C:\Users\BRADBO~1\AppData\Local\Temp\IHU5996.tmp.exe <==== ATTENTION
Task: {28F1EC48-B677-4B9E-BDBD-6A193173F825} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-09-13] (AVAST Software)
Task: {2D5FA1DB-0361-466E-B6EF-41A3EF65BA3A} - System32\Tasks\{02B1A1A6-18DA-4CF9-B2C3-E53667E5DEB7} => pcalua.exe -a "C:\Users\Cheryl\SkyDrive\Quicken Canada 2009\setup.exe" -d "C:\Users\Cheryl\SkyDrive\Quicken Canada 2009"
Task: {30A09C41-C076-418B-A243-12C0B2895DE4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-03] (Google Inc.)
Task: {34B4CC9B-DCD3-4BC2-99DE-E50784CA0506} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {365FB430-7E80-4EAA-AA83-BC70D6B6F7D9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-03] (Google Inc.)
Task: {3930D094-51A3-4F56-9CF7-ACFDFA7BC7C1} - System32\Tasks\GlaryInitialize => C:\Program Files (x86)\Glary Utilities\initialize.exe
Task: {3A751A22-E560-46AB-B94D-BD76AEFD5E9C} - System32\Tasks\{33D1504A-3C1C-4ED0-8E10-4AA50AEBDC83} => pcalua.exe -a "C:\Users\Cheryl\Downloads\New folder\dotnetfx.exe" -d "C:\Users\Cheryl\Downloads\New folder"
Task: {41CA19E0-8815-45BE-83E7-2B12C86C5442} - System32\Tasks\{F467FF8A-E118-48BB-8E78-BEA44A1FD103} => pcalua.exe -a "C:\Users\Cheryl\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VVN4925X\sp45708[1].exe" -d C:\Users\Cheryl\Desktop
Task: {42E1F66D-6508-4AFC-A3B3-A5B05DEC0999} - System32\Tasks\{32CBD78C-924A-4F9C-AB9D-F2B78B9C2D71} => pcalua.exe -a C:\Users\Cheryl\Downloads\irfanview_plugins_436_setup.exe -d C:\Users\Cheryl\Downloads
Task: {435FF278-6876-4AB1-887A-E57670A8F23C} - System32\Tasks\G2MUpdateTask-S-1-5-21-663276297-3394131366-1510214421-1149 => C:\Users\Brad Boyes\AppData\Local\Citrix\GoToMeeting\6140\g2mupdate.exe [2017-01-17] (Citrix Online, a division of Citrix Systems, Inc.)
Task: {44327431-7AC0-4AE5-A87D-9C974B5D2393} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.)
Task: {4439DBB5-135E-4A7D-9B66-451A4F45497E} - System32\Tasks\{2E8BCA56-955C-4DCE-B054-03BEC9669101} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.73.105.457/en/go/help.faq.installer?LastError=1618
Task: {47AF58A5-12B1-47F0-8083-25DA9CAC743E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10] (Adobe Systems Incorporated)
Task: {503A9CAA-9AD9-44AF-963D-BCCD5FB2091E} - System32\Tasks\HP online update program => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2007-05-08] (Hewlett-Packard)
Task: {5A8A609F-220E-498D-AA60-6180B66718BB} - System32\Tasks\G2MUploadTask-S-1-5-21-663276297-3394131366-1510214421-1149 => C:\Users\Brad Boyes\AppData\Local\Citrix\GoToMeeting\6140\g2mupload.exe [2017-01-17] (Citrix Online, a division of Citrix Systems, Inc.)
Task: {5BB8E9C5-1E5B-4FC2-919A-CD627B2692A6} - System32\Tasks\DVDAgent => c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
Task: {5BC810E1-D2DC-4F87-A387-D076A8A22A77} - System32\Tasks\PCloud => C:\Program Files (x86)\PCloud\pCloud.exe [2013-11-11] ()
Task: {5CDCBA11-B458-465D-BE65-2BF2CB41E59A} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-05-26] (Dropbox, Inc.)
Task: {601FD3E7-9E56-4B64-821B-789B7ADF57F8} - System32\Tasks\Hewlett-Packard online update program => c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
Task: {6A5F110C-1F3E-47FB-A3D1-F0F42135C1AB} - System32\Tasks\SoftwareUpdate Pro => C:\Program Files (x86)\Glarysoft\Software Update Pro\SoftwareUpdatePro.exe [2016-10-21] (Glarysoft Ltd)
Task: {70A641CD-1DA3-4A3D-B541-620E01E2EE9E} - System32\Tasks\{218EE8A6-453A-4F8E-A3CA-EFA98250B0C8} => pcalua.exe -a "C:\Users\Cheryl\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1W3AGFTI\zynga_toolbar[1].exe" -d C:\Users\Cheryl\Desktop
Task: {712C6861-2B14-4E72-92BA-22B6921FE2B7} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {741D6C99-8F61-4CE5-A006-7E13B7FF96CB} - System32\Tasks\FileAssociationManagerUpdater => C:\Program Files (x86)\FileAssociationManager\Updater.exe [2014-10-16] ()
Task: {78283710-0F60-4079-82EF-C336612E940A} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-13] (AVAST Software)
Task: {7A045FB1-2398-4A8F-BF15-A1209A5AC1B4} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
Task: {7BB98030-4E8F-415A-8F1D-E1C650AF5EAC} - System32\Tasks\{E4C3C0B4-5F13-4864-8977-CA0B173FAE52} => C:\Program Files (x86)\Quicken\qw.exe
Task: {7DA7272A-70A2-4568-B1C1-0270A8B3065E} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Task: {7F700A93-3B3B-436C-A14F-2E199A6C7192} - System32\Tasks\{CA1609F9-41CA-45BB-B0C3-9396FF6A16AE} => pcalua.exe -a C:\Users\Cheryl\Downloads\windows-live-essentials-2012.exe -d C:\Users\Cheryl\Downloads
Task: {8B526762-FDC5-4150-960C-5D0CC505FF53} - System32\Tasks\PC Cleaner Pro Update Job => C:\ProgramData\PC Cleaners\PCCleaners.exe <==== ATTENTION
Task: {8CEB75D3-364C-4EBC-BB59-D597CD88B228} - System32\Tasks\{CAF5179F-E9B4-4D4B-A8F6-DA6BE40A13D1} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files (x86)\Quicken\qw.exe"
Task: {903CC79E-BD74-4E2A-A8AA-3FEFF8B95F5A} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-12-28] (Microsoft Corporation)
Task: {929FCE64-A0EC-4040-B280-7E0E05AE8FAC} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-12-28] (Microsoft Corporation)
Task: {99F22112-3FF7-439C-BAF3-419BB219A2B6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.)
Task: {9DEB20FA-581A-45DD-A249-2FE4E1E45F8B} - \FreeFileViewerUpdateChecker -> No File <==== ATTENTION
Task: {A325EA77-5667-4A09-826D-FB02D190CC0A} - System32\Tasks\{001B8C07-AC33-43C1-B0AA-07E388100150} => pcalua.exe -a "c:\program files (x86)\microsoft money 2006\MNYCoreFiles\Setup\uninst.exe" -c /s:120
Task: {A7C5C205-F749-46B4-9910-E40105AC9D2B} - \Search-Protect -> No File <==== ATTENTION
Task: {AC9A2740-6BF8-42D1-9AF7-E848A5C174C8} - System32\Tasks\ParetoLogic Update Version2 => C:\Program Files (x86)\Common Files\ParetoLogic\UUS2\Pareto_Update.exe [2009-01-13] ()
Task: {AD3C7B42-6E93-46BB-BE48-86F18DF19330} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe
Task: {B3DFDC66-C275-4955-A71B-C3368C40DBB7} - System32\Tasks\{8E3B1355-FAB9-43BC-88F2-B54CBFA60788} => C:\Program Files (x86)\Quicken\qw.exe
Task: {B9E52A1E-0B8B-4412-8D98-C4F8A2C0AF28} - System32\Tasks\Go to RoboForm Install page => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMPMIMNMOJKJIMMJOJCNMMNMHMLMCNLMKMNJKMCNGMPMOMMJCNPMJMJMIMNJLJNJMJIMJJPMLJJNJICMJMCNOMPMCNPMFMHMCNPMCNIMJMPMPMFMJMCNOMCNIMJMPMPMCNNMJNPICMLMFMEKMICNJJCKFMPMJNHICMEKMICNJJCKJNBJCMMLHJKJNIGIDJJNKJCMJNNICMJNDJCMKJBJ"
Task: {C135F412-380E-4AA8-8F37-E790F4967483} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - Cheryl => C:\Program Files\Windows Calendar\WinCal.exe
Task: {C142BBF4-C796-45EA-8870-4B55287FE1FA} - \TuneUpUtilities_Task_BkGndMaintenance2013 -> No File <==== ATTENTION
Task: {C202F565-F90B-4CF1-95B4-81E508E68C2A} - System32\Tasks\{54744C4D-68B0-4E48-BCEB-E1554191A338} => C:\Program Files (x86)\Quicken\qw.exe
Task: {C2575EA5-06D5-43C6-A8B3-EE358CF59822} - System32\Tasks\{13B1B949-D381-4EEB-AAB8-561684FBAB8E} => pcalua.exe -a "C:\Users\Cheryl\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NZPPRQXT\QuickTimeInstaller[2].exe" -d C:\Users\Cheryl\Downloads
Task: {C81156EE-5FBC-4680-B1D0-8E83A755D52A} - \FinalTorrent Update Checker -> No File <==== ATTENTION
Task: {C90750EF-12D8-4E3F-BA18-B7906933F7FA} - System32\Tasks\HP Health Check => c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
Task: {CC2C8995-B6CC-487E-998D-C0ABFDFAB41D} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Brad Boyes\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {CD79186F-A681-42EB-9BC3-B0DBB12000A0} - System32\Tasks\{C213D3B5-AE2C-4BE0-9E55-E6C898DF00E5} => pcalua.exe -a "C:\Users\Cheryl\Downloads\New folder\dotnetfx35.exe" -d "C:\Users\Cheryl\Downloads\New folder"
Task: {D2F40C25-C32F-41A2-8025-7B738ADA0048} - System32\Tasks\{23DF0129-F152-4DB1-BBFD-1CFFACA0E9E5} => pcalua.exe -a C:\Users\Cheryl\AppData\Local\Temp\DivXInstaller.exe -d C:\Users\Cheryl\AppData\Local\Temp\IDC2.tmp -c /DWPCAB <==== ATTENTION
Task: {D7239CC5-B75E-4C44-8E2E-7A4181F9B018} - System32\Tasks\DivX online update program => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
Task: {DD2EE306-85ED-4C8E-8639-30330C002493} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-12-28] (Microsoft Corporation)
Task: {E3243FAF-CB56-43DE-96F4-FBC7BB5D5F39} - System32\Tasks\Driver Booster SkipUAC (Brad Boyes) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {E642C2B7-9A29-4C26-8E69-0DF36CB6BCB1} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-05-26] (Dropbox, Inc.)
Task: {E91D6474-70CC-42BE-80FF-8BED8AF557ED} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {ED2249AF-9E7F-451B-9978-04E3807AB90A} - System32\Tasks\{7A2D6C4A-72ED-4828-803D-7F89EB4171D1} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files (x86)\Quicken\qw.exe"
Task: {EF1EDBCE-84AD-44F7-BCF7-615895BDF710} - System32\Tasks\{3D3DDA26-CC25-41A2-BE9F-5096ECC87CBA} => pcalua.exe -a "C:\Program Files (x86)\PopCap Games\Bejeweled 3\PopUninstall.exe" -c "C:\Program Files (x86)\PopCap Games\Bejeweled 3\Install.log"
Task: {F1A0CC2C-559B-46C0-9D28-7C1CD1F1661A} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe
Task: {F4B5D89F-1F81-4D59-83FB-10289F8B80DB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Opt-in For HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-663276297-3394131366-1510214421-1149.job => C:\Users\Brad Boyes\AppData\Local\Citrix\GoToMeeting\6140\g2mupdate.exe
Task: C:\Windows\Tasks\G2MUploadTask-S-1-5-21-663276297-3394131366-1510214421-1149.job => C:\Users\Brad Boyes\AppData\Local\Citrix\GoToMeeting\6140\g2mupload.exe
Task: C:\Windows\Tasks\GlaryInitialize.job => C:\Program Files (x86)\Glary Utilities\initialize.exe
Task: C:\Windows\Tasks\ParetoLogic Registration.job => rundll32.exe C:\Program Files (x86)\Common Files\ParetoLogic\UUS2\UUS.dll
Task: C:\Windows\Tasks\ParetoLogic Update Version2.job => C:\Program Files (x86)\Common Files\ParetoLogic\UUS2\Pareto_Update.exe
Task: C:\Windows\Tasks\Tweaking.com - Windows Repair Tray Icon.job => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One) Tweaking.com - Windows Repair )Created By Tweaking.com
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2009-09-17 12:13 - 2008-08-05 20:15 - 00088576 _____ () C:\Windows\System32\STOFaxPort64.dll
2008-11-03 21:30 - 2008-10-06 12:54 - 00365952 _____ () C:\Program Files (x86)\SMINST\BLService.exe
2016-12-15 11:03 - 2016-12-15 11:03 - 01678560 _____ () C:\Users\Brad Boyes\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\amd64\ClientTelemetry.dll
2014-05-01 09:13 - 2016-11-13 17:13 - 00592384 _____ () C:\Users\Brad Boyes\AppData\Local\MEGAsync\ShellExtX64.dll
2010-04-07 17:40 - 2008-09-19 17:00 - 00530432 _____ () C:\Program Files\HP\HP Wireless Comfort Mobile Mouse\TSR\xDaemon.exe
2010-04-07 17:40 - 2008-09-19 12:09 - 00453632 _____ () C:\Program Files\HP\HP Wireless Comfort Mobile Mouse\UI\xManager\xTools.dll
2009-09-17 12:11 - 2008-08-05 20:14 - 00383488 _____ () C:\Program Files (x86)\SmarThru Office\x64\LegacyLauncher.exe
2008-10-22 09:32 - 2008-10-22 09:32 - 00628016 _____ () C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
2016-09-13 20:50 - 2016-09-13 20:50 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-09-13 20:50 - 2016-09-13 20:50 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-01-23 06:15 - 2017-01-23 06:15 - 04458584 _____ () C:\Program Files\AVAST Software\Avast\defs\17012300\algo.dll
2008-11-03 21:30 - 2008-10-06 12:54 - 00132480 _____ () C:\Program Files (x86)\SMINST\STWmiM.dll
2016-10-05 18:18 - 2016-10-05 18:18 - 01041720 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2016-10-05 18:18 - 2016-10-05 18:18 - 00080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2016-10-05 18:18 - 2016-10-05 18:18 - 00189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2016-12-15 11:03 - 2016-12-15 11:03 - 01244376 _____ () C:\Users\Brad Boyes\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\ClientTelemetry.dll
2016-08-08 13:17 - 2016-08-08 13:17 - 00482304 _____ () C:\Users\Brad Boyes\AppData\Local\MEGAsync\libsodium.dll
2009-09-17 12:11 - 2008-08-05 19:00 - 00516096 _____ () C:\Program Files (x86)\SmarThru Office\ConfigurationManager.dll
2017-01-10 16:46 - 2016-12-07 20:00 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2017-01-10 16:46 - 2016-12-07 20:00 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2017-01-10 16:46 - 2016-12-07 20:01 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2017-01-10 16:46 - 2016-12-07 20:00 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2017-01-10 16:46 - 2016-12-07 20:04 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2017-01-10 16:46 - 2016-12-07 20:00 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2017-01-10 16:46 - 2016-12-07 20:04 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2017-01-10 16:46 - 2016-12-07 20:00 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2017-01-10 16:46 - 2016-12-07 20:00 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2017-01-10 16:46 - 2017-01-05 19:03 - 00020824 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2017-01-10 16:46 - 2016-12-07 20:01 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2017-01-10 16:46 - 2017-01-05 19:03 - 01682768 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2017-01-10 16:46 - 2017-01-05 19:03 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00021328 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00052032 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00038712 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2017-01-10 16:46 - 2016-12-07 20:00 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2017-01-10 16:46 - 2016-12-07 20:04 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2017-01-10 16:46 - 2016-12-07 20:04 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00381760 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2017-01-10 16:46 - 2016-12-07 20:04 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00025432 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-01-10 16:46 - 2016-12-07 20:04 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2017-01-10 16:46 - 2016-12-07 20:04 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2017-01-10 16:46 - 2016-12-07 20:04 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2017-01-10 16:46 - 2016-12-07 20:04 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2017-01-10 16:46 - 2016-12-07 20:04 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2017-01-10 16:46 - 2016-12-07 20:04 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2017-01-10 16:46 - 2016-12-07 20:04 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2017-01-10 16:46 - 2017-01-05 19:03 - 00246608 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2017-01-10 16:46 - 2017-01-05 19:03 - 00026464 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-01-10 16:46 - 2016-12-07 20:02 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
2017-01-10 16:46 - 2017-01-05 19:03 - 00020288 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2017-01-10 16:46 - 2016-12-07 20:04 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00023384 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00019792 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror._winffi_winerror.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet._winffi_wininet.pyd
2017-01-10 16:46 - 2016-12-07 20:04 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00022360 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00024400 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2017-01-10 16:46 - 2016-12-07 19:57 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2017-01-10 16:46 - 2017-01-05 19:03 - 00084288 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2017-01-10 16:46 - 2017-01-05 19:04 - 01826104 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2017-01-10 16:46 - 2016-12-07 20:01 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00531264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 03928896 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 01972536 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00133432 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00224064 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00207680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00020296 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32._winffi_user32.pyd
2017-01-10 16:46 - 2016-12-07 20:08 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll
2017-01-10 16:46 - 2016-12-07 20:08 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2017-01-10 16:46 - 2017-01-05 19:04 - 00042816 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00171336 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00357688 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2017-01-10 16:46 - 2016-12-07 20:04 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00024920 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-01-10 16:46 - 2017-01-05 19:04 - 00546104 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2017-01-10 16:46 - 2016-12-07 20:11 - 00697304 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Controls\qtquickcontrolsplugin.dll
2016-09-13 20:50 - 2016-09-13 20:51 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2011-10-07 20:20 - 2011-10-07 20:20 - 08222720 _____ () C:\Program Files (x86)\FooPlayer\QtGui4.dll
2011-10-07 20:10 - 2011-10-07 20:10 - 02292224 _____ () C:\Program Files (x86)\FooPlayer\QtCore4.dll
2011-10-07 20:11 - 2011-10-07 20:11 - 00975360 _____ () C:\Program Files (x86)\FooPlayer\QtNetwork4.dll
2017-01-10 18:01 - 2017-01-10 18:01 - 19762776 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll
2016-09-14 13:00 - 2017-01-07 20:21 - 00521408 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\msfad.dll
2016-09-14 12:56 - 2017-01-07 20:04 - 00154304 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\JitV.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\Temp:1CE11B51 [111]
AlternateDataStreams: C:\ProgramData\Temp:373E1720 [118]
AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [125]
AlternateDataStreams: C:\ProgramData\Temp:A988B257 [398]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SamSs => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv2 => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srvnet => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WSService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-663276297-3394131366-1510214421-1149\…\1001movie.com -> 1001movie.com
There are 6091 more sites.
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2006-11-02 07:34 - 2016-10-07 14:31 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-663276297-3394131366-1510214421-1149\Control Panel\Desktop\\Wallpaper -> C:\Users\Brad Boyes\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
MSCONFIG\Services: avgfws => 2
MSCONFIG\Services: AVGIDSAgent => 2
MSCONFIG\Services: avgwd => 2
MSCONFIG\Services: cmdAgent => 2
MSCONFIG\Services: McComponentHostService => 3
MSCONFIG\Services: TVCapSvc => 2
MSCONFIG\Services: TVSched => 2
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{5D64D92C-2D8B-4FD7-A089-9492D009EB95}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{4CBE0ABB-C940-4136-B1FF-DC8DE99635BC}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{BD13C2E0-C1AD-479A-926C-E6A0700197B9}] => C:\Windows\twain_32\Samsung\SCX4x26\Sscan2io.exe
FirewallRules: [{9447F1E5-4CD1-458B-9367-4A177B140CD2}] => C:\Windows\twain_32\Samsung\SCX4x26\Sscan2io.exe
FirewallRules: [{1D131C9C-B57C-4146-97C1-892204EE5A3C}] => C:\Windows\twain_32\Samsung\SCX4x26\Scan2Pc.exe
FirewallRules: [{09C236D8-2AD9-4541-A891-E5C62C801C65}] => C:\Windows\twain_32\Samsung\SCX4x26\Scan2Pc.exe
FirewallRules: [{590997CD-204F-423A-988B-B39EAA63BAEC}] => C:\Windows\twain_32\Samsung\ScanMgr.exe
FirewallRules: [{8B31D2C6-0C63-4B7C-B1A8-A85646BADCA4}] => C:\Windows\twain_32\Samsung\ScanMgr.exe
FirewallRules: [{AC9CCF2C-5B14-48B1-80B5-DDC13D3367F3}] => C:\Windows\twain_32\Samsung\SCX4x26\Sscan2io.exe
FirewallRules: [{9FF0F008-F3C0-4DF3-98DE-A3C39009BE02}] => C:\Windows\twain_32\Samsung\SCX4x26\Sscan2io.exe
FirewallRules: [{32A0C789-4A31-44E3-9589-B31EA2A6A898}] => C:\Windows\twain_32\Samsung\SCX4x26\Scan2Pc.exe
FirewallRules: [{32C0B32B-1B27-438F-84CB-CB994071ECF3}] => C:\Windows\twain_32\Samsung\SCX4x26\Scan2Pc.exe
FirewallRules: [{D1D50729-9D78-4892-84A4-AA545DA8544D}] => C:\Windows\twain_32\Samsung\ScanMgr.exe
FirewallRules: [{891DCF00-40AB-4307-B7CC-4F4019457209}] => C:\Windows\twain_32\Samsung\ScanMgr.exe
FirewallRules: [{AABF5DBF-999A-4414-8136-384943844CD8}] => C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{0A06907C-6A93-451E-B6D8-A03869D13EDE}] => C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
FirewallRules: [{1644D325-0D3B-4744-91ED-E1BA4F361CC3}] => C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
FirewallRules: [{26174597-E434-4A8A-AD86-B92A1DE5E613}] => C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartVideo.exe
FirewallRules: [{92115FF3-713A-4048-982A-89A81EF70AD6}] => C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartPhoto.exe
FirewallRules: [{FE4755DD-901C-4A04-9AC9-D4DFE9B72C79}] => C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartMusic.exe
FirewallRules: [{560ADA74-54F7-4038-BFF5-2B4769D155FC}] => C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe
FirewallRules: [{B8E6F76E-4F32-45B3-A3C7-6D718DA7E6A1}] => C:\Program Files (x86)\CyberLink\PowerDirector\PDR.EXE
FirewallRules: [{D6ACCD53-B8DD-4C9D-9F37-6098B6DE72FD}] => c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe
FirewallRules: [{48EBD808-8D53-4FD6-8A63-22563E615E96}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{37DBD28E-A6E6-4BDA-B734-56F6BC6E3A1B}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2E6F5FFC-CE7D-45F4-93AF-6A9B020CF424}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{6CCFD986-5B71-4017-8F13-DBD447B99E56}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{F72CC07F-13C3-40FF-858C-B81EDDB06C9F}] => C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe
FirewallRules: [{D8E81956-1A54-49E8-9B8D-FF7013D58B40}] => C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe
FirewallRules: [{07278FF5-D28D-4035-92B2-116B3C34EDE9}] => C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
FirewallRules: [{A35E95E3-9B07-4FBE-A45D-E0A2E582208B}] => C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
FirewallRules: [{6B728B4A-13B6-453E-ADEF-C340C8ED77B5}] => C:\Program Files (x86)\AVG\AVG2012\avgdiagex.exe
FirewallRules: [{8750B1D5-BB1F-4717-9E2D-9E3BF0626B56}] => C:\Program Files (x86)\AVG\AVG2012\avgdiagex.exe
FirewallRules: [{263100C4-1E23-4165-B4C5-D1EE038BCEC8}] => C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
FirewallRules: [{A31192C6-11BB-4EB8-A0CC-0262C8DF471D}] => C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
FirewallRules: [{DFA0C932-4D45-40DE-B605-A11E4ECD8209}] => C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
FirewallRules: [{A86252D8-BF3F-4DF8-A2EE-7851C83844AA}] => C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
FirewallRules: [{19F4DFBD-F694-40A3-BDEE-81952C447FBB}] => C:\Users\Cheryl\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{EBEB8FB9-85B3-4E69-96AA-3FFD010EA082}] => C:\Program Files (x86)\Editor Software\StyleWriter 4\StWrIV.exe
FirewallRules: [{92582CAB-FDD6-4DA8-AA32-B00CC7985BBE}] => C:\Program Files (x86)\Editor Software\StyleWriter 4\StWrIV.exe
FirewallRules: [TCP Query User{189C2958-59D4-4D78-87D0-3EA09E7DFE0B}C:\users\cheryl\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\cheryl\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{3BB0BAE4-2833-45F5-BF14-744F76D00B27}C:\users\cheryl\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\cheryl\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{17332E65-7052-4A23-B484-43C0D40CE2FD}] => C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{18A3999A-4FE4-44FD-90AA-C1E7EFA63D7B}] => C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{F9138000-DA52-42A2-804E-3FC5F0506A63}] => C:\Users\Cheryl\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{C30CBEB5-9BE8-4EE4-A02B-7D3A8CC95C73}] => C:\Users\Cheryl\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{FD2FFE38-E593-4B38-99DA-2D64EECF3BAA}C:\xampplite\apache\bin\httpd.exe] => C:\xampplite\apache\bin\httpd.exe
FirewallRules: [UDP Query User{F26262D2-E75D-4716-AF94-0B7FE9479794}C:\xampplite\apache\bin\httpd.exe] => C:\xampplite\apache\bin\httpd.exe
FirewallRules: [TCP Query User{B765EEE8-A871-4E1E-9E3A-3AC37F8E3B07}C:\xampplite\mysql\bin\mysqld.exe] => C:\xampplite\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{D7E05D8A-6609-4C15-80FE-20647E4D1550}C:\xampplite\mysql\bin\mysqld.exe] => C:\xampplite\mysql\bin\mysqld.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => %systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
FirewallRules: [{1E6FDA3A-F615-4383-9ED4-3C4D56A81747}] => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{E3EDA66D-081B-4A07-B5CC-4C2387FA22FF}] => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{6236445F-8127-4B9C-AE4C-84D2F9FC1044}] => C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{E8C2FE30-4E80-41A6-91BD-08E185C52A0C}] => C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{46BD07AB-13DB-42A4-8379-E99656082458}] => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{F9D98C43-8270-47F0-A0A8-E939CF500DE0}] => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{10F6BB44-9A57-47DE-9990-207E0605EA5A}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{E7E75AE9-A09D-492C-972F-AAF5BF465963}] => LPort=2869
FirewallRules: [{C4905FE4-3492-44EF-84FA-B17FE88A4C78}] => LPort=1900
FirewallRules: [{823F7CCB-352B-493B-AAE4-883864F70664}] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{DDCBCED9-CD9C-4724-80C0-7A861813CF08}] => C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{5D6E4C9A-E41C-4A01-AD7B-BEA28DDBABE6}] => C:\Program Files (x86)\Apowersoft\Video Download Capture 6\Video Download Capture 6.exe
FirewallRules: [{88D1D7C1-204F-4D31-93FE-3504C9F4AF3E}] => C:\Program Files (x86)\Apowersoft\Video Download Capture 6\Video Download Capture 6.exe
FirewallRules: [{7F150B16-3642-48CA-8C57-85503B601A26}] => C:\Program Files (x86)\Apowersoft\Video Download Capture 6\rtmpsrv.exe
FirewallRules: [{3BF29058-B486-429D-8A9F-B3D8B49CE5F2}] => C:\Program Files (x86)\Apowersoft\Video Download Capture 6\rtmpsrv.exe
FirewallRules: [{31FA7598-22D1-4A02-9500-44954FEC21BB}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CEBC6023-094B-4119-881A-DF645B60E842}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{80BD3A9C-572A-46B4-828B-841C456A7CF7}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{9E5E77C1-309E-43FD-8D6E-0E9D2B326453}C:\program files (x86)\kodi\kodi.exe] => C:\program files (x86)\kodi\kodi.exe
FirewallRules: [UDP Query User{3FA64B4D-F56C-4B1D-8B18-DAEFBD2927B2}C:\program files (x86)\kodi\kodi.exe] => C:\program files (x86)\kodi\kodi.exe
FirewallRules: [{2724F6A3-ADC1-4095-A399-FAB81371E766}] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [TCP Query User{BAD27B7D-E0C3-4200-8D74-BAD15C62820C}C:\program files (x86)\glarysoft\software update pro\softwareupdatepro.exe] => C:\program files (x86)\glarysoft\software update pro\softwareupdatepro.exe
FirewallRules: [UDP Query User{2412D9F4-9413-41B7-8E5A-73DA8A776D08}C:\program files (x86)\glarysoft\software update pro\softwareupdatepro.exe] => C:\program files (x86)\glarysoft\software update pro\softwareupdatepro.exe
FirewallRules: [TCP Query User{7DD990FD-7E13-4D33-AADD-FEECAEFDC175}C:\program files (x86)\freetelly\freetelly.exe] => C:\program files (x86)\freetelly\freetelly.exe
FirewallRules: [UDP Query User{AC93CAFD-F90E-4759-B1B7-4DF241582B3C}C:\program files (x86)\freetelly\freetelly.exe] => C:\program files (x86)\freetelly\freetelly.exe
FirewallRules: [{31DF5469-A616-4B39-8E61-DD8D10ADC987}] => C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Apowersoft Screen Recorder Pro 2.exe
FirewallRules: [{2543A517-2BE7-4620-A7AD-4482CA15A484}] => C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Apowersoft Screen Recorder Pro 2.exe
==================== Restore Points =========================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (01/23/2017 02:44:56 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Could not get performance counter registry info for WSearchIdxPi for instance due to the following error: The operation completed successfully. 0x0.
Error: (01/23/2017 02:44:56 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Performance monitoring cannot be initialized for the gatherer object, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.
Context: Application, SystemIndex Catalog
Error: (01/23/2017 02:44:56 PM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Performance monitoring cannot be initialized for the gatherer service, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.
Error: (01/23/2017 02:44:42 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Could not get performance counter registry info for WSearchIdxPi for instance due to the following error: The operation completed successfully. 0x0.
Error: (01/23/2017 02:44:41 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Performance monitoring cannot be initialized for the gatherer object, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.
Context: Application, SystemIndex Catalog
Error: (01/23/2017 02:44:41 PM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Performance monitoring cannot be initialized for the gatherer service, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.
Error: (01/23/2017 02:43:50 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Could not get performance counter registry info for WSearchIdxPi for instance due to the following error: The operation completed successfully. 0x0.
Error: (01/23/2017 02:43:45 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Performance monitoring cannot be initialized for the gatherer object, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.
Context: Application, SystemIndex Catalog
Error: (01/23/2017 02:43:45 PM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Performance monitoring cannot be initialized for the gatherer service, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.
Error: (01/23/2017 02:15:59 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Could not get performance counter registry info for WSearchIdxPi for instance due to the following error: The operation completed successfully. 0x0.
System errors:
=============
Error: (01/18/2017 01:27:34 AM) (Source: volsnap) (EventID: 35) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage failed to grow.
Error: (01/15/2017 09:14:07 AM) (Source: BROWSER) (EventID: 8032) (User: )
Description: The browser service has failed to retrieve the backup list too many times on transport \Device\NetBT_Tcpip_{441002D6-A1DB-4978-BCD7-A289CAB158E6}.
The backup browser is stopping.
Error: (01/14/2017 11:34:35 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: The server {96D1EED3-701E-4FE5-B996-A543A8465897} did not register with DCOM within the required timeout.
Error: (01/14/2017 11:34:05 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Dropbox Update Service (dbupdate) service terminated unexpectedly. It has done this 1 time(s).
Error: (01/14/2017 11:33:48 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: The server {FE9617F6-E606-42AA-BECC-0E9CDA246D63} did not register with DCOM within the required timeout.
Error: (01/13/2017 08:51:03 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Windows Update service hung on starting.
Error: (01/13/2017 08:48:05 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The HP Support Solutions Framework Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Error: (01/13/2017 08:48:05 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the HP Support Solutions Framework Service service to connect.
Error: (01/13/2017 08:44:21 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Net.Pipe Listener Adapter service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Error: (01/13/2017 08:44:21 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Net.Pipe Listener Adapter service to connect.
CodeIntegrity:
===================================
Date: 2010-03-16 20:35:08.596
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22577_none_0f81a4cb3813bb8a\tcpip.sys because the set of per-page image hashes could not be found on the system.
Date: 2010-03-16 20:35:08.403
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_0f6c030d3823f645\tcpip.sys because the set of per-page image hashes could not be found on the system.
Date: 2010-03-16 20:35:08.185
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22167_none_0f8c6d1f380baafd\tcpip.sys because the set of per-page image hashes could not be found on the system.
Date: 2010-03-16 20:35:07.967
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18377_none_0ef8061a1ef61e99\tcpip.sys because the set of per-page image hashes could not be found on the system.
Date: 2010-03-16 20:35:07.804
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18311_none_0f32e3e61ecadee9\tcpip.sys because the set of per-page image hashes could not be found on the system.
Date: 2010-03-16 20:35:07.616
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18063_none_0efecf2c1ef1a5d7\tcpip.sys because the set of per-page image hashes could not be found on the system.
Date: 2010-03-16 20:35:07.429
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18000_none_0f3cadd61ec3b22c\tcpip.sys because the set of per-page image hashes could not be found on the system.
Date: 2010-03-07 18:55:04.481
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22577_none_0f81a4cb3813bb8a\tcpip.sys because the set of per-page image hashes could not be found on the system.
Date: 2010-03-07 18:55:04.344
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_0f6c030d3823f645\tcpip.sys because the set of per-page image hashes could not be found on the system.
Date: 2010-03-07 18:55:04.192
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22167_none_0f8c6d1f380baafd\tcpip.sys because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Processor: Intel(R) Core(TM)2 Duo CPU T6400 @ 2.00GHz
Percentage of memory in use: 89%
Total physical RAM: 3999.21 MB
Available physical RAM: 436.59 MB
Total Virtual: 7996.6 MB
Available Virtual: 4147.19 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:219.97 GB) (Free:5.62 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (RECOVERY) (Fixed) (Total:12.12 GB) (Free:0.68 GB) NTFS ==>[system with boot components (obtained from drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: C52A050B)
Partition 1: (Active) - (Size=220 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=814 MB) - (Type=27)
Partition 3: (Not Active) - (Size=12.1 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
