slow processes, sites wont close unless forced, cursor just spins [S

Please help and let me know if I just need a new computer.  All the sites I try to visit are extremely slow in opening.  I cannot go from site to site,  and when I try to close one, I usually get the windows….site is not responding.  the same thing happens when I am playing a game, it usually just crashes and I have to close from taskbar. 

here are the texts you have asked for.

aswMBR version 1.0.1.2252 Copyright© 2014 AVAST Software
Run date: 2017-04-30 07:20:54
—————————–
07:20:54.832    OS Version: Windows x64 6.1.7601 Service Pack 1
07:20:54.832    Number of processors: 4 586 0x2A07
07:20:54.848    ComputerName: KATHY-PC  UserName: kathy
07:20:57.173    Initialize success
07:20:57.204    VM: initialized successfully
07:20:57.204    VM: Intel CPU BiosDisabled
07:21:06.112    AVAST engine defs: 17042900
07:21:23.022    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1
07:21:23.022    Disk 0 Vendor: Hitachi_HDS721010CLA332 JP4OA3MA Size: 953869MB BusType: 11
07:21:23.100    Disk 0 MBR read successfully
07:21:23.116    Disk 0 MBR scan
07:21:23.116    Disk 0 Windows 7 default MBR code
07:21:23.116    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS          100 MB offset 2048
07:21:23.132    Disk 0 default boot code
07:21:23.147    Disk 0 Partition 2 00     07    HPFS/NTFS NTFS       953767 MB offset 206848
07:21:23.225    Disk 0 scanning C:\Windows\system32\drivers
07:21:31.367    Service scanning
07:21:49.901    Modules scanning
07:21:49.901    Disk 0 trace - called modules:
07:21:49.916    ntoskrnl.exe CLASSPNP.SYS disk.sys aswSP.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys
07:21:49.932    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007867060]
07:21:49.932    3 aswSP.sys[fffff880043073b2] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-1[0xfffffa800759c060]
07:21:51.398    AVAST engine scan C:\Windows
07:21:54.425    AVAST engine scan C:\Windows\system32
07:24:10.784    AVAST engine scan C:\Windows\system32\drivers
07:24:21.786    AVAST engine scan C:\Users\kathy
07:30:09.976    AVAST engine scan C:\ProgramData
07:33:05.635    Disk 0 statistics 4498431/0/0 @ 3.72 MB/s
07:33:05.650    Scan finished successfully
07:33:19.998    Disk 0 MBR has been saved successfully to "C:\Users\kathy\Desktop\MBR.dat"
07:33:20.003    The log file has been saved successfully to "C:\Users\kathy\Desktop\aswMBR.txt"


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-04-2017
Ran by [removed] (administrator) on KATHY-PC (30-04-2017 07:37:56)
Running from C:\Users\[removed]\Desktop
[removed] Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIPAE.EXE
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM\…\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2017-01-19] (Apple Inc.)
HKLM\…\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-04-12] (AVAST Software)
HKLM-x32\…\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1087184 2016-01-20] (SEIKO EPSON CORPORATION)
HKLM-x32\…\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-01-17] (Apple Inc.)
HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIPAE.EXE [417776 2014-11-13] (SEIKO EPSON CORPORATION)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-04-12] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-04-12] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2017-03-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2017-03-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2017-03-14] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2016-06-06]
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
GroupPolicy: Restriction - Chrome <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76 75.75.76.76
Tcpip\..\Interfaces\{90737AD7-EC0F-4A9A-9240-05C790471720}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{DDED8800-07B5-43B7-A17D-6F223175D62E}: [DhcpNameServer] 75.75.75.75 75.75.76.76 75.75.76.76

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q;={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q;={searchTerms}
HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2014-10-27] (RealDownloader)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2017-03-14] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2017-03-14] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2017-03-14] (Microsoft Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2014-10-27] (RealDownloader)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2017-03-14] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-04-12] (AVAST Software)
BHO-x32: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2017-03-14] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2017-03-14] (Microsoft Corporation)
DPF: HKLM {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} hxxp://utilities.pcpitstop.com/da2/PCPitStop2.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-17] (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-17] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-04-19] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\kathy\AppData\Roaming\Mozilla\Firefox\Profiles\21kim9lc.default-1455458506894 [2017-04-30]
FF NewTab: Mozilla\Firefox\Profiles\21kim9lc.default-1455458506894 -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\21kim9lc.default-1455458506894 -> Yahoo! (Avast)
FF DefaultSearchEngine.US: Mozilla\Firefox\Profiles\21kim9lc.default-1455458506894 -> Google
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\21kim9lc.default-1455458506894 -> hxxps://search.yahoo.com/yhs/search
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\21kim9lc.default-1455458506894 -> Yahoo! (Avast)
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\21kim9lc.default-1455458506894 -> Yahoo! (Avast)
FF Homepage: Mozilla\Firefox\Profiles\21kim9lc.default-1455458506894 -> hxxp://www.wmcactionnews5.com/
FF Keyword.URL: Mozilla\Firefox\Profiles\21kim9lc.default-1455458506894 -> hxxps://search.yahoo.com/yhs/search
FF Extension: (Shield Recipe Client) - C:\Users\kathy\AppData\Roaming\Mozilla\Firefox\Profiles\21kim9lc.default-1455458506894\features\{75168800-cc3e-4ede-8e84-bb4429c0dcdc}\[removed] [2017-04-22]
FF SearchPlugin: C:\Users\kathy\AppData\Roaming\Mozilla\Firefox\Profiles\21kim9lc.default-1455458506894\searchplugins\yahoo-avast.xml [2017-04-11]
FF Extension: (Motive Extension) - C:\Program Files (x86)\Mozilla Firefox\extensions\[removed] [2013-03-14] [not signed]
FF Extension: (Firefox Screenshots) - C:\Program Files (x86)\Mozilla Firefox\browser\features\[removed] [2017-04-26] [not signed]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF48
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF48 [2017-04-12]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF48 [2017-04-12]
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\WebRep\FF48
FF HKLM-x32\…\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: (RealDownloader) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2015-02-18] [not signed]
FF HKLM-x32\…\Firefox\Extensions: [{338950EA-82DB-44C1-930D-0C28E023C9F0}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\…\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt => not found
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_148.dll [2017-04-12] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_148.dll [2017-04-12] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-12] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-02-20] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-17] (Microsoft Corporation)
FF Plugin-x32: @Motive.com/NpMotive,version=1.0 -> C:\Program Files (x86)\ATT\8.3.1.18\ma\bin\npMotive.dll [No File]
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin-x32: @real.com/nppl3260;version=17.0.15.10 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2015-02-18] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.15 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2014-10-27] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=17.0.15.10 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2015-02-18] (RealPlayer Cloud)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2013-02-14] (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-04] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-04-04] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll [2015-02-18] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll [2015-02-18] (RealPlayer Cloud)

Chrome:
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxps://www.facebook.com/?stype=lo&jlou;=Afd5cNswK2uQsWuxD_2MA1wx8Z-uCfmidiuBHYouRamLId50PlhYmCnlpielSgrs8iCbH0VlOVLFS_PoUILQdlANDEIkhBhmui43OO-GpPntsA&smuh;=15270&lh;=Ac9qQ2HAga3XhOvp","hxxps://www.facebook.com/?ref=tn_tnmn"
CHR NewTab: Default -> "active": false,
            "entry": "chrome-extension://odcommfbpjnempjflnjmgmnfpgcadboo/stubby.html"
          
CHR Profile: C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default [2017-04-30]
CHR Extension: (Avast SafePrice) - C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-03-17]
CHR Extension: (Scafe) - C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fombknmjpgiihbadamhdiafgjolhjoap [2017-03-24]
CHR Extension: (Avast Online Security) - C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-04-05]
CHR Extension: (QuizPremium Ads) - C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\haigcjcpcifobennbdkonacobbalkdch [2017-04-10]
CHR Extension: (Search Encrypt) - C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\homdopmpokbgedggpjfgdkddiohnlilf [2017-04-20]
CHR Extension: (QuizGurus Ads) - C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbcgleppdkoefdpkmljlkkpjinlgemjn [2017-04-19]
CHR Extension: (DestinyGaze Advertisements) - C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnkeeipidigolgjdckchakbibbgieegn [2017-04-19]
CHR Extension: (Chrome Web Store Payments) - C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-16]
CHR Extension: (TotalRecipeSearch) - C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\odcommfbpjnempjflnjmgmnfpgcadboo [2017-04-19]
CHR Extension: (Chrome Media Router) - C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-05]
CHR Profile: C:\Users\kathy\AppData\Local\Google\Chrome\User Data\System Profile [2017-04-30]
CHR HKLM-x32\…\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\…\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-04-2017
Ran by [removed] (30-04-2017 07:38:31)
Running from C:\Users\[removed]\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2011-04-29 00:50:16)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3123285271-2719112281-3259339859-500 - Administrator - Disabled)
ASPNET (S-1-5-21-3123285271-2719112281-3259339859-1004 - Limited - Enabled)
Guest (S-1-5-21-3123285271-2719112281-3259339859-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3123285271-2719112281-3259339859-1002 - Limited - Enabled)
kathy (S-1-5-21-3123285271-2719112281-3259339859-1000 - Administrator - Enabled) => C:\Users\kathy

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC (HKLM-x32\…\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\…\Adobe AIR) (Version: 24.0.0.180 - Adobe Systems Incorporated)
Adobe Flash Player 25 ActiveX (HKLM-x32\…\Adobe Flash Player ActiveX) (Version: 25.0.0.148 - Adobe Systems Incorporated)
Adobe Flash Player 25 NPAPI (HKLM-x32\…\Adobe Flash Player NPAPI) (Version: 25.0.0.148 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\…\{7E5DC2C5-115A-322B-976C-219237FAED66}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Apple Application Support (32-bit) (HKLM-x32\…\{9BA1A894-B42F-4805-BC8C-349C905A3930}) (Version: 5.3.1 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\…\{7EAC8A42-9FAC-4F6B-AABF-C08C9F2E0F13}) (Version: 5.3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\…\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\…\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\…\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.4.5.0 - Asmedia Technology)
Avast Premier (HKLM-x32\…\Avast Antivirus) (Version: 17.3.2291 - AVAST Software)
Battle.net (HKLM-x32\…\Battle.net) (Version:  - Blizzard Entertainment)
Bonjour (HKLM\…\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\…\CCleaner) (Version: 5.17 - Piriform)
Diablo III (HKLM-x32\…\Diablo III) (Version:  - Blizzard Entertainment)
Easy Photo Scan (HKLM-x32\…\{1021AA9F-6A0A-4128-B89B-1A05A8DD1770}) (Version: 1.00.0009 - Seiko Epson Corporation)
Epson Connect Printer Setup (HKLM-x32\…\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.0 - Seiko Epson Corporation)
Epson Customer Research Participation (HKLM\…\{B26449A6-6007-4460-B4FE-C4776115BCEA}) (Version: 1.81.0000 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\…\{9F205E94-9E42-4486-A92A-DF3F6CB85444}) (Version: 3.10.0061 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\…\EPSON Scanner) (Version:  - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\…\{7BAC3F7A-B963-468E-982E-B5608A87408D}) (Version: 4.4.4 - SEIKO EPSON CORPORATION)
EPSON XP-430 Series Printer Uninstall (HKLM\…\EPSON XP-430 Series) (Version:  - Seiko Epson Corporation)
Epson XP-430_XP-434 Guide version 1.0 (HKLM-x32\…\UsersGuideEpson XP-430_XP-434 Guide_is1) (Version: 1.0 - )
EpsonNet Print (HKLM\…\{15A0F113-BF2C-4C12-8AA8-42AE0D9AE1C9}) (Version: 3.1.2.0 - SEIKO EPSON Corporation)
Futuremark SystemInfo (HKLM-x32\…\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 4.0.0.0 - Futuremark Corporation)
Google Chrome (HKLM-x32\…\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
Google Drive (HKLM-x32\…\{A1238426-ECDF-4639-BE2F-8D12A97AE23C}) (Version: 2.34.5075.1619 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden
HP Deskjet 1050 J410 series Basic Device Software (HKLM\…\{4268BF51-DFDF-4178-8B8D-5D5752FCAA58}) (Version: 22.50.231.0 - Hewlett-Packard Co.)
HP Deskjet 1050 J410 series Help (HKLM-x32\…\{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}) (Version: 140.0.66.66 - Hewlett Packard)
HP Photo Creations (HKLM-x32\…\HP Photo Creations) (Version: 1.0.0.12262 - HP Photo Creations Powered by RocketLife)
HP Update (HKLM-x32\…\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HWiNFO64 Version 5.42 (HKLM\…\HWiNFO64_is1) (Version: 5.42 - Martin Malík - REALiX)
iCloud (HKLM\…\{0493048C-CB1A-44B7-8BB3-8467AF7BA9E4}) (Version: 6.1.2.13 - Apple Inc.)
Intel(R) Management Engine Components (HKLM-x32\…\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
iTunes (HKLM\…\{9D0D2A8B-7E7B-4D88-8D50-24286ED6A5EB}) (Version: 12.5.5.5 - Apple Inc.)
JMicron JMB36X Driver (HKLM-x32\…\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0000 - JMICRON Technology Corp.)
Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Malwarebytes version 3.0.6.1469 (HKLM\…\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
Microsoft .NET Framework 1.1 (HKLM-x32\…\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 4.5.2 (HKLM\…\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft IntelliPoint 7.1 (HKLM\…\{5EBE0F1F-45DF-4298-AC6B-E8E54EAEC834}) (Version: 7.10.344.0 - Microsoft)
Microsoft IntelliType Pro 8.1 (HKLM\…\Microsoft IntelliType Pro 8.1) (Version: 8.15.406.0 - Microsoft)
Microsoft Office Professional Plus 2013 - en-us (HKLM\…\ProPlusRetail - en-us) (Version: 15.0.4919.1002 - Microsoft Corporation)
Microsoft Silverlight (HKLM\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\…\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\…\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\…\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\…\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\…\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\…\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\…\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\…\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\…\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\…\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\…\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\…\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 54.0 (x86 en-US) (HKLM-x32\…\Mozilla Firefox 54.0 (x86 en-US)) (Version: 54.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\…\MozillaMaintenanceService) (Version: 54.0.0.6326 - Mozilla)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4919.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4919.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4919.1002 - Microsoft Corporation) Hidden
Path of Exile (HKLM-x32\…\{f4eefad3-23e8-4a72-a872-3796bb8c498f}) (Version: 2.5.0.3332 - Grinding Gear Games)
Path of Exile (x32 Version: 2.5.0.3332 - Grinding Gear Games) Hidden
PlaysTV (HKLM-x32\…\PlaysTV) (Version: 1.18.2-r120419-release - Plays.tv, LLC)
Raptr (HKLM-x32\…\Raptr) (Version: 5.2.8-r120085-release - Raptr, Inc)
RealDownloader (x32 Version: 17.0.15.4 - RealNetworks, Inc.) Hidden
RealDownloader (x32 Version: 17.0.15.7 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer Cloud (HKLM-x32\…\RealPlayer 17.0) (Version: 17.0.15 - RealNetworks)
Realtek Ethernet Controller Driver (HKLM-x32\…\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.37.1229.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6251 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
SafeZone Stable 3.55.2393.596 (x32 Version: 3.55.2393.596 - Avast Software) Hidden
Secunia PSI (2.0.0.4003) (HKLM-x32\…\Secunia PSI) (Version: 2.0.0.4003 - Secunia)
UpdateService (x32 Version: 1.0.0 - RealNetworks, Inc.) Hidden
Ventrilo Client (HKLM-x32\…\{789289CA-F73A-4A16-A331-54D498CE069F}) (Version: 3.0.8 - Flagship Industries, Inc.)
Ventrilo Server (HKLM-x32\…\{1D46A3A0-B37D-423A-91C2-101A49E2FF80}) (Version: 3.0.3 - Flagship Industries, Inc.)
Video Downloader (x32 Version: 1.0.0 - RealNetworks) Hidden
Windows Live Essentials (HKLM-x32\…\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Sign-in Assistant (HKLM-x32\…\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\…\{B10914FD-8812-47A4-85A1-50FCDE7F1F33}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live Upload Tool (HKLM-x32\…\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
World of Warcraft (HKLM-x32\…\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {074EC646-EFF5-4CA5-A892-6C066DC5CE87} - System32\Tasks\{B937D728-AB5C-4F88-8D65-C3ADBD29CE50} => pcalua.exe -a D:\SETUP.EXE -d D:\
Task: {086EC528-2E62-4320-A549-EC986F96BAB5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-03-14] (Microsoft Corporation)
Task: {12099EF9-4666-435D-8776-F39C502C6E45} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3123285271-2719112281-3259339859-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-10-30] (RealNetworks, Inc.)
Task: {19B7D6A0-1808-4FD1-BD19-935DAD1FA2A4} - System32\Tasks\{FC628A37-3763-4AC5-B27E-973517F50165} => C:\Users\kathy\Desktop\Diablo-III-8370-enUS-Installer-downloader.exe
Task: {1D3F4133-EFD5-45A5-AE24-7F16A268A0BF} - System32\Tasks\EPSON XP-430 Series Update {2A80CE17-8D90-4695-A513-5C2444139E20} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSPAE.EXE [2013-11-21] (SEIKO EPSON CORPORATION)
Task: {1E047238-7234-4007-8A5B-3F89FD665FFC} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3123285271-2719112281-3259339859-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-10-30] (RealNetworks, Inc.)
Task: {254DD416-C8FB-40FE-B81B-F30394AD4ED0} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-04-12] (AVAST Software)
Task: {26563BA1-3BD0-441E-8C85-D44EFEB87A00} - System32\Tasks\{80A88456-7E5F-45D3-9003-B567194B373F} => Firefox.exe
Task: {3D49DEAE-65F0-42BA-B0F6-980FAFAD575A} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2013-09-22] ()
Task: {3F1AA883-2D57-4DCA-8705-C253A9C6ED2A} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3123285271-2719112281-3259339859-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-10-30] (RealNetworks, Inc.)
Task: {480AA46B-94F7-4EC3-B409-6A4179294AE9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] (Microsoft Corporation)
Task: {4B173DD8-E483-44BD-8FBD-8DF75BB8B926} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] (Microsoft Corporation)
Task: {5D9ADB66-F56E-4896-87B0-D5E59E13B2DB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-04-15] (Piriform Ltd)
Task: {6EB435D2-BA79-44AE-B40D-A5E4C18440CE} - System32\Tasks\RealDownloader Update Check => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [2014-10-29] ()
Task: {729C2EA9-0D4D-4616-AAC2-0744E1C96EAE} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3123285271-2719112281-3259339859-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe [2014-10-27] (RealNetworks, Inc.)
Task: {8C0A9A69-B02A-4A69-AB1D-AE566E0044E7} - System32\Tasks\{F1349365-EEF0-4FFD-83DC-DD80BFB66B89} => pcalua.exe -a C:\Users\kathy\Desktop\Install_LiveX.exe -d C:\Users\kathy\Desktop
Task: {8C3F1A35-D8C6-4C2E-AB0A-CE9CA221ADCE} - System32\Tasks\{509E5DCA-AED4-4CEE-B17E-F6DB33AADABF} => D:\SETUP.EXE
Task: {8C6895D3-0BF3-4933-847A-5DA5C3B42109} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-04-12] (Adobe Systems Incorporated)
Task: {90D24CA1-50FD-46D8-8092-0F0F32B01C50} - System32\Tasks\{D85C3585-91EC-4139-B53D-C93D0010DB51} => C:\Users\kathy\Desktop\Diablo-III-8370-enUS-Installer-downloader.exe
Task: {96D82CDC-5008-4408-B897-782745BC72E5} - System32\Tasks\SafeZone scheduled Autoupdate 1462303413 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-03-22] (Avast Software)
Task: {9D194826-9E03-4C81-BD31-D467A99D429C} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-03-14] (Microsoft Corporation)
Task: {AC92EB93-1188-4506-B4D0-FF3E85A808A3} - System32\Tasks\{82BB1A52-8E3C-4D41-8631-85D01ADC3B3E} => Firefox.exe
Task: {AEECD1B0-A900-4D42-95E5-F48AA4734BEF} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3123285271-2719112281-3259339859-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-10-30] (RealNetworks, Inc.)
Task: {BAF9CB05-05CF-4AC2-B209-35D80AC576B3} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2009-11-05] (Microsoft Corporation)
Task: {BB60938F-830C-4FDF-847F-F64888B3739B} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3123285271-2719112281-3259339859-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe [2014-10-27] (RealNetworks, Inc.)
Task: {BDA7DC91-A88B-4DBA-8865-D59E05C4219E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {C7209D06-51D5-4119-9F5C-9816E557649E} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => c:\Program Files\Microsoft IntelliType Pro\IType.exe [2011-04-13] (Microsoft Corporation)
Task: {C7A0D40B-9969-4E55-A0A3-A2B2CF7334D0} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-04-13] (AVAST Software)
Task: {D205FCEE-A6B4-4A6A-B7D3-78B76CA711E9} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {DB09B96A-D4D3-48D5-9F78-6122B6057883} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3123285271-2719112281-3259339859-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2014-10-26] (RealNetworks, Inc.)
Task: {EB9F2748-47B2-4C38-80D3-60AE56794BB2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-02] (Adobe Systems Incorporated)
Task: {F3567804-1232-4C68-83E3-711163422A7B} - System32\Tasks\{D4F55AB1-8DE8-477A-87D1-311CF50DD790} => \\KATHY-PC\Users\kathy\Diablo-III-8370-enUS-Installer\Diablo III Setup.exe
Task: {F49367A9-DFA5-4AF1-897D-8B4052C24854} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\EPSON XP-430 Series Update {2A80CE17-8D90-4695-A513-5C2444139E20}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSPAE.EXE :/EXE:{2A80CE17-8D90-4695-A513-5C2444139E20} /F:Update  SYSTEM ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\kathy\AppData\Local\fb05b4\0b8081.lnk -> C:\Users\kathy\AppData\Local\fb05b4\fe8e31.bat (No File)

==================== Loaded Modules (Whitelisted) ==============

2016-09-01 18:12 - 2016-09-01 18:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-01-13 14:56 - 2017-01-13 14:56 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-18 19:47 - 2017-01-17 04:25 - 00117440 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-10-26 23:59 - 2014-10-26 23:59 - 00039568 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2017-03-22 18:01 - 2017-01-31 07:34 - 08909512 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2014-10-30 06:41 - 2014-10-30 06:41 - 00031856 _____ () C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
2017-01-31 20:43 - 2017-04-14 06:52 - 02271520 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-01-31 20:43 - 2017-04-14 06:52 - 02267600 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-04-12 06:43 - 2017-04-12 06:43 - 00162024 _____ () c:\Program Files\AVAST Software\Avast\x64\vaarclient.dll
2017-04-12 06:43 - 2017-04-12 06:43 - 00790544 _____ () C:\Program Files\AVAST Software\Avast\x64\ffl2.dll
2017-04-12 06:43 - 2017-04-12 06:43 - 00275776 _____ () c:\Program Files\AVAST Software\Avast\x64\StreamBack.dll
2014-10-29 20:06 - 2014-10-29 20:06 - 00560192 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
2017-04-12 06:43 - 2017-04-12 06:43 - 00170216 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-04-12 06:43 - 2017-04-12 06:43 - 00176480 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-04-29 06:56 - 2017-04-29 06:56 - 06026480 _____ () C:\Program Files\AVAST Software\Avast\defs\17042900\algo.dll
2017-04-12 06:43 - 2017-04-12 06:43 - 00653520 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-04-12 06:43 - 2017-04-12 06:43 - 00230632 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2014-05-11 06:54 - 2015-02-18 22:05 - 00865880 _____ () c:\program files (x86)\real\realplayer\RPDS\Plugins\cldplin.dll
2014-10-30 06:41 - 2014-10-30 06:41 - 00035976 _____ () C:\Program Files (x86)\Real\UpdateService\DL2UpdatePlugin.dll
2014-10-30 06:41 - 2014-10-30 06:41 - 00039560 _____ () C:\Program Files (x86)\Real\UpdateService\RealDownloaderUpdatePlugin.dll
2014-10-30 06:41 - 2014-10-30 06:41 - 00032888 _____ () C:\Program Files (x86)\Real\UpdateService\RPDSUpdatePlugin.dll
2017-01-13 14:56 - 2017-01-13 14:56 - 01041720 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2016-09-01 18:13 - 2016-09-01 18:13 - 00080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2017-01-13 14:56 - 2017-01-13 14:56 - 00189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2017-03-22 18:01 - 2017-01-31 05:14 - 08909512 _____ () C:\Program Files\Microsoft Office 15\root\Office15\1033\GrooveIntlResource.dll
2016-11-21 07:51 - 2016-11-21 07:51 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-04-12 06:43 - 2017-04-12 06:43 - 00293936 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2014-10-29 20:01 - 2014-10-29 20:01 - 01382048 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\cpprest100_1_2.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [134]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\plsapp => ""="service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\…\1001movie.com -> 1001movie.com

There are 6091 more sites.


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2016-05-14 20:42 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\kathy\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 75.75.75.75 - 75.75.76.76
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: Apple Mobile Device Service => 2
MSCONFIG\Services: AudioEndpointBuilder => 2
MSCONFIG\Services: FontCache => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: p2pimsvc => 3
MSCONFIG\Services: PerfHost => 3
MSCONFIG\Services: pla => 3
MSCONFIG\Services: PNRPAutoReg => 3
MSCONFIG\Services: PNRPsvc => 3
MSCONFIG\Services: PolicyAgent => 3
MSCONFIG\Services: ProtectedStorage => 3
MSCONFIG\Services: seclogon => 2
MSCONFIG\Services: SensrSvc => 3
MSCONFIG\Services: SessionEnv => 3
MSCONFIG\Services: SstpSvc => 3
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RealPlayer Cloud Service UI.lnk => C:\Windows\pss\RealPlayer Cloud Service UI.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Secunia PSI Tray.lnk => C:\Windows\pss\Secunia PSI Tray.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^kathy^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^beeba6.lnk => C:\Windows\pss\beeba6.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AMD AVT => Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
MSCONFIG\startupreg: ApplePhotoStreams => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: EvtMgr6 => C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
MSCONFIG\startupreg: Google Update => "C:\Users\kathy\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: iCloudServices => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
MSCONFIG\startupreg: IntelliPoint => "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
MSCONFIG\startupreg: ISTray => "C:\Program Files (x86)\PC Tools\PC Tools Security\pctsGui.exe" /hideGUI
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: itype => "c:\Program Files\Microsoft IntelliType Pro\itype.exe"
MSCONFIG\startupreg: JMB36X IDE Setup => C:\Windows\RaidTool\xInsIDE.exe
MSCONFIG\startupreg: Launch LGDCore => "C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE
MSCONFIG\startupreg: Launch LgDeviceAgent => "C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe"
MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
MSCONFIG\startupreg: MobileDocuments => C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RealDownloader => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: swg => "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: TkBellExe => "c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{806F3C11-6F75-447F-9EA4-9859453637B9}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{702D8959-1637-4658-91D4-F73E7C44B0A4}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{C82D830F-6889-483E-9BB8-57F2C59F17AE}] => (Allow) svchost.exe
FirewallRules: [{DB409C55-9F87-40AD-9F89-0E66BBE92147}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [TCP Query User{15CB89E7-D9B6-4EDF-9A46-EC69D93C0EF2}C:\program files (x86)\ventsrv\ventrilo_srv.exe] => (Allow) C:\program files (x86)\ventsrv\ventrilo_srv.exe
FirewallRules: [UDP Query User{008A6BCF-B7A2-4466-8AF8-ADCB80564557}C:\program files (x86)\ventsrv\ventrilo_srv.exe] => (Allow) C:\program files (x86)\ventsrv\ventrilo_srv.exe
FirewallRules: [{45BB01A2-570F-4C78-B467-DE3A8DE35372}] => (Allow) C:\Program Files (x86)\Ventrilo\Ventrilo.exe
FirewallRules: [{802E0A51-E2BE-4EDD-8DF7-26A1A42E5CED}] => (Allow) C:\Program Files (x86)\Ventrilo\Ventrilo.exe
FirewallRules: [{4A4C3BDE-11D3-470E-8085-45671BCF9972}] => (Allow) C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\USBSetup.exe
FirewallRules: [{7A4288F4-6C37-4455-AF7B-B91DAF8D399C}] => (Allow) C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\USBSetup.exe
FirewallRules: [{F7BD0B6A-9437-4542-89E1-E7D16DBEF127}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A5C265EF-7356-445B-ABBB-E6AC3051EE62}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{127DD0A4-19E9-44DA-813C-4F268679E633}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DFD31849-6BD6-46C2-9D02-2E731F9EFB36}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5E3CDC62-52A9-41F7-A831-43B35B9DFC8A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D7D47563-8EDF-4AFF-BCE2-1CBCC8C1FDC7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{5F2B5AD6-7313-4EB3-B8F6-D5221C16A4F3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{FF6439A9-1942-4AFA-9C54-1CBF4D22C7BF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{4EDC91C7-C2FD-4DB3-A1D1-4F59536506E2}] => (Allow) LPort=3724
FirewallRules: [{14EC9744-BFD0-42CA-A786-5FCAE0582857}] => (Allow) LPort=1119
FirewallRules: [{DB1F0E42-FEBB-43CD-8896-F01BBC372821}] => (Allow) LPort=1120
FirewallRules: [{7DC5CBF6-4F7E-47A8-9EF6-1B527297DEA5}] => (Allow) LPort=4000
FirewallRules: [{10962630-EDBC-4B5B-A0B0-BAD1BC9ED10B}] => (Allow) LPort=6113
FirewallRules: [{7395515B-C7E9-4A88-BE24-01453631D8FB}] => (Allow) LPort=6114
FirewallRules: [{7CA9A711-AD5A-438D-A3FB-F5D93E0434E4}] => (Allow) LPort=443
FirewallRules: [{0406B5BD-6254-48EC-AD34-1E1AE004760B}] => (Allow) LPort=3074
FirewallRules: [{A40A9973-5DCC-49B2-A3A3-E50EB0993F65}] => (Allow) LPort=5223
FirewallRules: [{93D85615-536B-490D-A18F-37B5F5605508}] => (Allow) LPort=4433
FirewallRules: [TCP Query User{32015787-21B8-4EA4-BED8-CFB4B054310D}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{FB8D0144-653F-4B53-99C1-B661B930121F}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [TCP Query User{F994674E-2FFB-4EBE-A780-44D61573DF57}C:\program files (x86)\diablo iii\diablo iii.exe] => (Block) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{DE0F8841-61AB-4180-8D41-18FCBC6AA670}C:\program files (x86)\diablo iii\diablo iii.exe] => (Block) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [{42CA28DE-5285-4733-AC1F-9DFD9661B6B8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{F78974D6-E528-4087-9B4C-D204797BDCBB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{2AA758D6-C1E0-4278-9DB2-9258500466AB}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{F6077656-A1E0-4AC7-A4B3-9336679349A8}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{31338F44-7581-48FD-97E4-082661EA27F1}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{343475D0-7374-455A-8FD5-3FE2AF6305C0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{BF4A15C9-E5C1-4C4B-8C36-C8B673340D87}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{9C144172-CED3-4146-8EB3-AA32571B3F4E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{2DDF25DF-8E98-45FF-A27E-CD2AE1757529}] => (Allow) c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe
FirewallRules: [TCP Query User{69C66612-D67F-4632-B305-2CD6B3509120}C:\program files (x86)\diablo iii public test\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii public test\diablo iii.exe
FirewallRules: [UDP Query User{48C21F4B-8717-4696-A0D8-25B572C4183D}C:\program files (x86)\diablo iii public test\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii public test\diablo iii.exe
FirewallRules: [{8B6A1E59-CD0C-4FF6-9961-48CC21485E9B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{7F54D2D8-29E3-496F-A62C-C46DEF313417}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{3101E754-58BE-459C-A32D-0637E93406EB}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{22AC46FC-B7AB-4B68-97D5-B4709674D3B7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{2B812C14-C393-49E0-916F-3AC360A749ED}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D50835DF-14C2-4448-A015-0CE6E13B6474}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6FC68589-758D-4977-B468-E3B792DA95A2}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{7B53F517-8A2C-40F9-B0C1-70431873625D}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{2D76B4FB-0647-4057-8451-D27A3C29CC8B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{A5BBE726-F6C8-459E-AD9B-84533A5010C4}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{9B669D7D-E98F-45A6-8DB3-A3D1B9338E20}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
FirewallRules: [{9280AE23-DEFE-4E21-960D-16FBBB3A7A28}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
FirewallRules: [{5DFCFD1E-5822-4E18-B8DD-579F1B0CEE6A}] => (Allow) D:\Network\EpsonNetSetup\ENEASYAPP.EXE
FirewallRules: [{C82BE4D4-3494-4015-99D7-AB33A3749AAB}] => (Allow) D:\Network\EpsonNetSetup\ENEASYAPP.EXE
FirewallRules: [{F6D006C0-B054-432B-BE3B-70C47926C4FA}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe
FirewallRules: [{283C5437-BD40-4304-86E2-53F38322C29D}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe
FirewallRules: [{6701D5AD-4F82-4E80-BBF7-AE0A2731D919}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{5BF06E43-250A-44FD-8AD4-4D1A1114319B}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [TCP Query User{0E5BFA63-EC62-4FEB-9E34-26DFA45011BF}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{C4EED076-25BD-4FDD-85EA-BAC09B511541}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{640417D8-D24F-4F6D-80CC-7EA606DFE4FF}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{26E8FC77-AB66-4280-A573-1534F866552F}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{9E733708-A742-4463-A837-731479558463}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{06A76910-7C52-45BE-937F-D913E06E277E}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{B2BA1E8A-F56A-4266-8E5D-C287BB46EA79}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{895690C9-D2DB-4A36-B9AD-BB413C1A38C6}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{6867A9DD-3CF7-405A-952F-D509C43F9F5F}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [TCP Query User{BF61A5A3-29B8-4A64-958C-8982F4A4EA4B}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe
FirewallRules: [UDP Query User{AD14F927-E929-4799-A6EF-1B2D6DC6B849}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe
FirewallRules: [{9F48A670-D4E2-4796-90BA-B873A5EF906F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{7E112FC5-B93D-4599-BF47-10C0BA9AFD91}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.596\SZBrowser.exe

==================== Restore Points =========================

18-04-2017 06:12:52 Windows Update
23-04-2017 19:00:10 Windows Backup

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/30/2017 06:57:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: EEventManager.exe, version: 3.2.0.0, time stamp: 0x569efb0c
Faulting module name: dlbatwds.ds, version: 3.107.0.0, time stamp: 0x45df4d3d
Exception code: 0xc0000005
Fault offset: 0x00004da2
Faulting process id: 0xf7c
Faulting application start time: 0x01d2c1a8dff51a89
Faulting application path: C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
Faulting module path: C:\Windows\Twain_32\Dell\AIO Printer A940\dlbatwds.ds
Report Id: 2442078e-2d9c-11e7-b2ff-f46d0494433e

Error: (04/30/2017 06:56:11 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (04/29/2017 09:28:43 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Wow-64.exe version 7.2.0.24015 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 26f8

Start Time: 01d2c14b9362c42f

Termination Time: 568

Application Path: C:\Program Files (x86)\World of Warcraft\Wow-64.exe

Report Id: b5e61b96-2d4c-11e7-b749-f46d0494433e

Error: (04/29/2017 10:21:54 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Wow-64.exe version 7.2.0.24015 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1c80

Start Time: 01d2c0fc0f2d6cdb

Termination Time: 108

Application Path: C:\Program Files (x86)\World of Warcraft\Wow-64.exe

Report Id:

Error: (04/29/2017 10:21:41 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Wow-64.exe version 7.2.0.24015 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 19c0

Start Time: 01d2c0fc1c71c4a6

Termination Time: 70

Application Path: C:\Program Files (x86)\World of Warcraft\Wow-64.exe

Report Id:

Error: (04/29/2017 10:21:26 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Wow-64.exe version 7.2.0.24015 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 18c8

Start Time: 01d2c0fc14d9d700

Termination Time: 78

Application Path: C:\Program Files (x86)\World of Warcraft\Wow-64.exe

Report Id:

Error: (04/29/2017 10:21:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: firefox.exe, version: 54.0.0.6323, time stamp: 0x58fe8270
Faulting module name: xul.dll, version: 54.0.0.6323, time stamp: 0x58fe8682
Exception code: 0x80000003
Fault offset: 0x008677a3
Faulting process id: 0x149c
Faulting application start time: 0x01d2c00b384a311f
Faulting application path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Faulting module path: C:\Program Files (x86)\Mozilla Firefox\xul.dll
Report Id: 7fe46b67-2cef-11e7-b749-f46d0494433e

Error: (04/29/2017 10:21:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: plugin-container.exe, version: 54.0.0.6323, time stamp: 0x58fe8693
Faulting module name: xul.dll, version: 54.0.0.6323, time stamp: 0x58fe8682
Exception code: 0x80000003
Fault offset: 0x008677a3
Faulting process id: 0x10dc
Faulting application start time: 0x01d2c01b25a3f598
Faulting application path: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
Faulting module path: C:\Program Files (x86)\Mozilla Firefox\xul.dll
Report Id: 77e248b2-2cef-11e7-b749-f46d0494433e

Error: (04/28/2017 08:53:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Wow-64.exe version 7.2.0.24015 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1d30

Start Time: 01d2c07f68060608

Termination Time: 581

Application Path: C:\Program Files (x86)\World of Warcraft\Wow-64.exe

Report Id: 9fcfbdab-2c7e-11e7-b749-f46d0494433e

Error: (04/28/2017 08:21:27 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Wow-64.exe version 7.2.0.24015 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1f40

Start Time: 01d2c01b34fd7992

Termination Time: 566

Application Path: C:\Program Files (x86)\World of Warcraft\Wow-64.exe

Report Id: 8610ec6c-2c15-11e7-b749-f46d0494433e


System errors:
=============
Error: (04/30/2017 06:55:02 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 6:53:37 AM on ‎4/‎30/‎2017 was unexpected.

Error: (04/17/2017 07:24:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Apple Mobile Device Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (04/17/2017 07:24:05 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Apple Mobile Device Service service to connect.

Error: (04/16/2017 07:28:29 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Windows Time service terminated with the following error:
A system shutdown is in progress.

Error: (04/15/2017 08:11:08 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 4:46:49 AM on ‎4/‎15/‎2017 was unexpected.

Error: (04/12/2017 06:51:03 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The RealPlayer Cloud Service service hung on starting.

Error: (04/12/2017 06:50:59 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The IKE and AuthIP IPsec Keying Modules service hung on starting.

Error: (04/12/2017 06:50:37 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Function Discovery Resource Publication service hung on starting.

Error: (04/10/2017 06:58:19 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 6:56:54 AM on ‎4/‎10/‎2017 was unexpected.

Error: (04/04/2017 06:35:06 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Windows Error Reporting Service service to connect.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
Percentage of memory in use: 40%
Total physical RAM: 8173.43 MB
Available physical RAM: 4883.48 MB
Total Virtual: 16345.04 MB
Available Virtual: 12851.68 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:760.64 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 4292DBF1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

thanks

start
CreateRestorePoint:
CloseProcesses:
GroupPolicy: Restriction - Chrome <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR Extension: (QuizPremium Ads) - C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\haigcjcpcifobennbdkonacobbalkdch [2017-04-10]
CHR Extension: (DestinyGaze Advertisements) - C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnkeeipidigolgjdckchakbibbgieegn [2017-04-19]
U3 aswMBR; \??\C:\Users\kathy\AppData\Local\Temp\aswMBR.sys [X] <==== ATTENTION
Shortcut: C:\Users\kathy\AppData\Local\fb05b4\0b8081.lnk -> C:\Users\kathy\AppData\Local\fb05b4\fe8e31.bat (No File)
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [134]
CMD: ipconfig /flushdns
CMD: netsh winsock reset all
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
Hosts:
End

• Please download AdwCleaner and save the file to your Desktop.
  In order to use AdwCleaner, you have to agree the Eula:
• Right-click AdwCleaner.exe and select [external image: AVOiBNU.jpg] Run as administrator to run the programme.
• Follow the prompts.
• Click [external image: A49sxPr.png]Scan.
• Upon completion, click [external image: 6cyn5v5.png]Logfile. A log (AdwCleaner[S1].txt) will open. Briefly check the log for anything you know to be legitimate.
• Return to AdwCleaner. Ensure anything you know to be legitimate does not have a checkmark under the corresponding tab.
• Click [external image: MqHawIb.png]Clean.
• Follow the prompts and allow your computer to reboot.
• After the reboot, a log (AdwCleaner[C1].txt) will open. Copy the contents of the log and paste in your next reply.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

ok here goes.

Fix result of Farbar Recovery Scan Tool (x64) Version: 01-05-2017
Ran by [removed] (01-05-2017 15:06:43) Run:1
Running from C:\Users\[removed]\Desktop
[removed] Boot Mode: Normal
==============================================

fixlist content:
*****************


start
CreateRestorePoint:
CloseProcesses:
GroupPolicy: Restriction - Chrome <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR Extension: (QuizPremium Ads) - C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\haigcjcpcifobennbdkonacobbalkdch [2017-04-10]
CHR Extension: (DestinyGaze Advertisements) - C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnkeeipidigolgjdckchakbibbgieegn [2017-04-19]
U3 aswMBR; \??\C:\Users\kathy\AppData\Local\Temp\aswMBR.sys [X] <==== ATTENTION
Shortcut: C:\Users\kathy\AppData\Local\fb05b4\0b8081.lnk -> C:\Users\kathy\AppData\Local\fb05b4\fe8e31.bat (No File)
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [134]
CMD: ipconfig /flushdns
CMD: netsh winsock reset all
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
Hosts:
End
*****************

Restore point was successfully created.
Processes closed successfully.
C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\Software\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key removed successfully
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key removed successfully
HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found.
C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\haigcjcpcifobennbdkonacobbalkdch => moved successfully
C:\Users\kathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnkeeipidigolgjdckchakbibbgieegn => moved successfully
HKLM\System\CurrentControlSet\Services\aswMBR => key removed successfully
aswMBR => service removed successfully
C:\Users\kathy\AppData\Local\fb05b4\0b8081.lnk => moved successfully
C:\ProgramData\TEMP => ":5C321E34" ADS removed successfully.

========= ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========


========= netsh winsock reset all =========


Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.


========= End of CMD: =========


========= netsh int ipv4 reset =========

Reseting Global, OK!
Reseting Interface, OK!
Restart the computer to complete this action.


========= End of CMD: =========


========= netsh int ipv6 reset =========

Reseting Interface, OK!
Restart the computer to complete this action.


========= End of CMD: =========

C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 7232767 B
Java, Flash, Steam htmlcache => 18456 B
Windows/system/drivers => 454067 B
Edge => 0 B
Chrome => 489455246 B
Firefox => 392884838 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 0 B
kathy => 5161984 B

RecycleBin => 1279769 B
EmptyTemp: => 863 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 15:08:07 ====

# AdwCleaner v6.046 - Logfile created 01/05/2017 at 15:30:33
# Updated on 24/04/2017 by Malwarebytes
# Database : 2017-05-01.2 [Server]
# Operating System : Windows 7 Home Premium Service Pack 1 (X64)
# Username : kathy - KATHY-PC
# Running from : C:\Users\kathy\Desktop\adwcleaner_6.046.exe
# Mode: Clean
# Support : https://www.malwarebytes.com/support



***** [ Services ] *****



***** [ Folders ] *****

[!] Folder not deleted: C:\ProgramData\Auslogics
[-] Folder deleted: C:\ProgramData\Application Data\Auslogics
[-] Folder deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
[-] Folder deleted: C:\Users\Public\Documents\Downloaded Installers
[-] Folder deleted: C:\Program Files (x86)\Auslogics


***** [ Files ] *****

[!] File not deleted: C:\Windows\SysNative\drivers\swdumon.sys
[!] File not deleted: C:\Users\kathy\AppData\Roaming\Mozilla\Firefox\Profiles\21kim9lc.default-1455458506894\invalidprefs.js


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Shortcuts ] *****



***** [ Scheduled Tasks ] *****



***** [ Registry ] *****

[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\citysearch.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.citysearch.com
[-] Key deleted: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\plsvcv2
[#] Key deleted on reboot: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\plsvcv2
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{56AD7EEE-D6C0-410E-8A7B-811DEA764554}
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{E8EB2F1F-661E-4A7F-8F9A-77DEB757A906}
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{AF85DB83-06F2-4ECF-97CF-C46EDB06BE29}
[-] Key deleted: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\Software\sparktrust
[-] Key deleted: HKU\S-1-5-21-3123285271-2719112281-3259339859-1000\Software\BSD
[#] Key deleted on reboot: HKCU\Software\sparktrust
[#] Key deleted on reboot: HKCU\Software\BSD
[-] Key deleted: HKLM\SOFTWARE\sparktrust
[-] Key deleted: HKLM\SOFTWARE\Auslogics
[-] Key deleted: HKLM\SOFTWARE\BSD
[#] Key deleted on reboot: [x64] HKCU\Software\sparktrust
[#] Key deleted on reboot: [x64] HKCU\Software\BSD
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\conduit.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\conduit.com


***** [ Web browsers ] *****

[!] Not deleted: [C:\Users\kathy\AppData\Roaming\Mozilla\Firefox\Profiles\21kim9lc.default-1455458506894\prefs.js] - "browser.search.defaulturl" -  "hxxps://search.yahoo.com/yhs/search"
[!] Not deleted: [C:\Users\kathy\AppData\Roaming\Mozilla\Firefox\Profiles\21kim9lc.default-1455458506894\prefs.js] - "keyword.URL" -  "hxxps://search.yahoo.com/yhs/search"
[!] [aol.com] [Search ProviderWeb data] not deleted:
[!] [ask.com] [Search ProviderWeb data] not deleted:


*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [3038 Bytes] - [01/05/2017 15:30:33]
C:\AdwCleaner\AdwCleaner[S0].txt - [3160 Bytes] - [01/05/2017 15:25:24]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [3184 Bytes] ##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.3 (04.10.2017)
Operating System: Windows 7 Home Premium x64
Ran by [removed] (Administrator) on Mon 05/01/2017 at 15:41:40.80
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 10

Successfully deleted: C:\Users\kathy\AppData\Roaming\Mozilla\Firefox\Profiles\21kim9lc.default-1455458506894\Invalidprefs.js (File)
Successfully deleted: C:\Windows\system32\drivers\swdumon.sys (File)
Successfully deleted: C:\Users\kathy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\22H8KFVI (Temporary Internet Files Folder)
Successfully deleted: C:\Users\kathy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\59G2YEML (Temporary Internet Files Folder)
Successfully deleted: C:\Users\kathy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M4LT08KN (Temporary Internet Files Folder)
Successfully deleted: C:\Users\kathy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OIULBDUJ (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\22H8KFVI (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\59G2YEML (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M4LT08KN (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OIULBDUJ (Temporary Internet Files Folder)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Mon 05/01/2017 at 15:44:29.28
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Hope that is all right….thanks again…

Zemana AntiMalware 2.72.2.388 (Installed)

——————————————————-
Scan Result            : Completed
Scan Date              : 2017/5/1
Operating System       : Windows 7 64-bit
Processor              : 4X Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
BIOS Mode              : Legacy
CUID                   : 12B1F7126030B460BEB277
Scan Type              : System Scan
Duration               : 12m 22s
Scanned Objects        : 107297
Detected Objects       : 5
Excluded Objects       : 0
Read Level             : SCSI
Auto Upload            : Enabled
Detect All Extensions  : Disabled
Scan Documents         : Disabled
Domain Info            : WORKGROUP,0,2

Detected Objects
——————————————————-

Firefox Homepage
Status             : Scanned
Object             : http://www.wmcactionnews5.com/
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Suspicious Browser Setting
Cleaning Action    : Repair
Related Objects    :
                Browser Setting - Firefox Homepage

TotalRecipeSearch
Status             : Scanned
Object             : %localappdata%\google\chrome\user data\default\extensions\odcommfbpjnempjflnjmgmnfpgcadboo
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : PUA.ChromeExt!Gr
Cleaning Action    : Repair
Related Objects    :
                Browser Extension - TotalRecipeSearch

Search Encrypt
Status             : Scanned
Object             : %localappdata%\google\chrome\user data\default\extensions\homdopmpokbgedggpjfgdkddiohnlilf
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : PUA.ChromeExt!Gr
Cleaning Action    : Repair
Related Objects    :
                Browser Extension - Search Encrypt

{80a88456-7e5f-45d3-9003-b567194b373f}
Status             : Scanned
Object             : NE->c:\windows\system32\tasks\{80a88456-7e5f-45d3-9003-b567194b373f}
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Adware:Win32/FF.TASKSCHD.GEN.A!Neng
Cleaning Action    : Quarantine
Related Objects    :
                (null) - (null)

{82bb1a52-8e3c-4d41-8631-85d01adc3b3e}
Status             : Scanned
Object             : NE->c:\windows\system32\tasks\{82bb1a52-8e3c-4d41-8631-85d01adc3b3e}
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Adware:Win32/FF.TASKSCHD.GEN.A!Neng
Cleaning Action    : Quarantine
Related Objects    :
                (null) - (null)


Cleaning Result
——————————————————-
Cleaned               : 5
Reported as safe      : 0
Failed                : 0
 

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 5/1/17
Scan Time: 5:49 PM
Logfile: mwb.txt
Administrator: Yes

-Software Information-
Version: 3.0.6.1469
Components Version: 1.0.103
Update Package Version: 1.0.1846
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: kathy-PC\kathy

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 346115
Time Elapsed: 4 min, 39 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)


(end)

it does seem to be acting a little better.  I noticed a lot faster reboot time….I am able to move from site to site better.

ok this is the log   please advise how to run it again in safe mode because it stopped and thats what it suggested   thanks

Tweaking.com - Windows Repair v3.9.29
——————————————————————————–

System Variables
——————————————————————————–
OS: Windows 7 Home Premium
OS Architecture: 64-bit
OS Version: 6.1.7601.23742
OS Service Pack: Service Pack 1
Computer Name: KATHY-PC
Windows Drive: C:\
Windows Path: C:\Windows
Program Files: C:\Program Files
Program Files (x86): C:\Program Files (x86)
Current Profile: C:\Users\kathy
Current Profile SID: S-1-5-21-3123285271-2719112281-3259339859-1000
Current Profile Classes: S-1-5-21-3123285271-2719112281-3259339859-1000_Classes
Profiles Location: C:\Users
Profiles Location 2: C:\Windows\ServiceProfiles
Local Settings AppData: C:\Users\kathy\AppData\Local
——————————————————————————–

System Information
——————————————————————————–
System Up Time: 0 Days 00:05:32

Process Count: 77
Commit Total: 3.02 GB
Commit Limit: 15.96 GB
Commit Peak: 3.12 GB
Handle Count: 27924
Kernel Total: 438.13 MB
Kernel Paged: 365.86 MB
Kernel Non Paged: 72.26 MB
System Cache: 2.03 GB
Thread Count: 1352
——————————————————————————–

Memory Before Cleaning with CleanMem
——————————————————————————–
Memory Total: 7.98 GB
Memory Used: 2.95 GB(36.9666%)
Memory Avail.: 5.03 GB
——————————————————————————–

Cleaning Memory Before Starting Repairs…

Memory After Cleaning with CleanMem
——————————————————————————–
Memory Total: 7.98 GB
Memory Used: 2.53 GB(31.7103%)
Memory Avail.: 5.45 GB
——————————————————————————–

Starting Repairs…
   Started at (5/2/2017 2:33:23 PM)

Setting Any Missing 'InstallDate' From Uninstall Sections Before Running Repair…
Total Missing 'InstallDate' Fixed: 59
 
01 - Reset Registry Permissions
   Restore Windows 7/8/10 Default Registry Permissions
   Start (5/2/2017 2:33:33 PM)


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\hku.7z
Done,  0.23 seconds.


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\hklm.7z
Done,  1.66 seconds.

   Running Repair Under System Account
   Done (5/2/2017 2:35:08 PM)

Reset File Permissions
   Restore Windows 7/8/10 Default File Permissions
   Start (5/2/2017 2:35:09 PM)


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\default.7z
Done,  0.18 seconds.


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\profile.7z
Done,  0.21 seconds.


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\program_files.7z
Done,  0.2 seconds.


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\program_files_x86.7z
Done,  0.23 seconds.


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\programdata.7z
Done,  0.21 seconds.


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\windows.7z
Done,  1.28 seconds.

   Running Repair Under System Account
   Done (5/2/2017 2:49:53 PM)

03 - Reset Service Permissions
   Start (5/2/2017 2:49:53 PM)

   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 2:52:55 PM)

04 - Register System Files
   Start (5/2/2017 2:52:55 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 2:54:48 PM)

05 - Repair WMI
   Start (5/2/2017 2:54:48 PM)

   Starting Security Center So We Can Export The Security Info.

   Exporting Antivirus Info…
   Avast Antivirus Exported.
   Malwarebytes Exported.

   Exporting AntiSpyware Info…
   Malwarebytes Exported.
   Windows Defender Exported.
   Avast Antivirus Exported.

   Exporting 3rd Party Firewall Info…
   Avast Antivirus Exported.

   Running Repair Under Current User Account
   Done (5/2/2017 2:56:58 PM)

06 - Repair Windows Firewall
   Start (5/2/2017 2:56:58 PM)

Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\services.7z
Done,  0.15 seconds.

   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 2:57:41 PM)

07 - Repair Internet Explorer
   Start (5/2/2017 2:57:41 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 2:58:04 PM)

08 - Repair MDAC/MS Jet
   Start (5/2/2017 2:58:04 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 2:58:12 PM)

09 - Repair Hosts File
   Start (5/2/2017 2:58:12 PM)
   Running Repair Under System Account
   Done (5/2/2017 2:58:13 PM)

10 - Remove Policies Set By Infections
   Start (5/2/2017 2:58:13 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account

The current repair has failed to start for over 30 sec.
Trying Again….

   Running Repair Under System Account

The current repair has failed to start for over 30 sec.
Trying Again….

   Running Repair Under System Account

The current repair has failed to start for over 30 sec.
Trying Again….

   Running Repair Under System Account
   Done (5/2/2017 3:00:27 PM)

   Done, but failed, at (5/2/2017 3:01:22 PM)
   Total Repair Time: 00:28:04

The current repair has failed to start 4 times.
Something is keeping the repair from running.

Try running the repairs in Windows Safe Mode. (This will keep 3rd party programs from getting in the way of the repairs)
If the repairs still fail then please post in the Tweaking.com forums for support.

 

ok here is the repair log  i think

Tweaking.com - Windows Repair v3.9.29
——————————————————————————–

System Variables
——————————————————————————–
OS: Windows 7 Home Premium
OS Architecture: 64-bit
OS Version: 6.1.7601.23742
OS Service Pack: Service Pack 1
Computer Name: KATHY-PC
Windows Drive: C:\
Windows Path: C:\Windows
Program Files: C:\Program Files
Program Files (x86): C:\Program Files (x86)
Current Profile: C:\Users\kathy
Current Profile SID: S-1-5-21-3123285271-2719112281-3259339859-1000
Current Profile Classes: S-1-5-21-3123285271-2719112281-3259339859-1000_Classes
Profiles Location: C:\Users
Profiles Location 2: C:\Windows\ServiceProfiles
Local Settings AppData: C:\Users\kathy\AppData\Local
——————————————————————————–

System Information
——————————————————————————–
System Up Time: 0 Days 00:02:14

Process Count: 23
Commit Total: 1.63 GB
Commit Limit: 15.96 GB
Commit Peak: 1.63 GB
Handle Count: 5368
Kernel Total: 273.09 MB
Kernel Paged: 227.08 MB
Kernel Non Paged: 46.01 MB
System Cache: 1,023.34 MB
Thread Count: 320
——————————————————————————–

Memory Before Cleaning with CleanMem
——————————————————————————–
Memory Total: 7.98 GB
Memory Used: 1.69 GB(21.1417%)
Memory Avail.: 6.29 GB
——————————————————————————–

Cleaning Memory Before Starting Repairs…

Memory After Cleaning with CleanMem
——————————————————————————–
Memory Total: 7.98 GB
Memory Used: 1.59 GB(19.8714%)
Memory Avail.: 6.40 GB
——————————————————————————–

Starting Repairs…
   Started at (5/2/2017 6:06:16 PM)

Setting Any Missing 'InstallDate' From Uninstall Sections Before Running Repair…
Total Missing 'InstallDate' Fixed: 0
 
01 - Reset Registry Permissions
   Restore Windows 7/8/10 Default Registry Permissions
   Start (5/2/2017 6:06:17 PM)


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\hku.7z
Done,  0.16 seconds.


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\hklm.7z
Done,  1.54 seconds.

   Running Repair Under System Account
   Done (5/2/2017 6:07:32 PM)

Reset File Permissions
   Restore Windows 7/8/10 Default File Permissions
   Start (5/2/2017 6:07:32 PM)


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\default.7z
Done,  0.13 seconds.


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\profile.7z
Done,  0.13 seconds.


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\program_files.7z
Done,  0.13 seconds.


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\program_files_x86.7z
Done,  0.11 seconds.


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\programdata.7z
Done,  0.13 seconds.


Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\windows.7z
Done,  1.14 seconds.

   Running Repair Under System Account
   Done (5/2/2017 6:16:54 PM)

03 - Reset Service Permissions
   Start (5/2/2017 6:16:54 PM)

   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:17:32 PM)

04 - Register System Files
   Start (5/2/2017 6:17:32 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:18:00 PM)

05 - Repair WMI
   Start (5/2/2017 6:18:00 PM)

   Starting Security Center So We Can Export The Security Info.

   Exporting Antivirus Info…
   Avast Antivirus Exported.
   Malwarebytes Exported.

   Exporting AntiSpyware Info…
   Malwarebytes Exported.
   Windows Defender Exported.
   Avast Antivirus Exported.

   Exporting 3rd Party Firewall Info…
   Avast Antivirus Exported.

   Running Repair Under Current User Account
   Done (5/2/2017 6:20:23 PM)

06 - Repair Windows Firewall
   Start (5/2/2017 6:20:23 PM)

Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\services.7z
Done,  0.13 seconds.

   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:20:37 PM)

07 - Repair Internet Explorer
   Start (5/2/2017 6:20:37 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:20:43 PM)

08 - Repair MDAC/MS Jet
   Start (5/2/2017 6:20:43 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:20:47 PM)

09 - Repair Hosts File
   Start (5/2/2017 6:20:47 PM)
   Running Repair Under System Account
   Done (5/2/2017 6:20:48 PM)

10 - Remove Policies Set By Infections
   Start (5/2/2017 6:20:48 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:20:53 PM)

11 - Repair Start Menu Icons Removed By Infections
   Start (5/2/2017 6:20:53 PM)
   Running Repair Under System Account
   Done (5/2/2017 6:20:54 PM)

12 - Repair Icons
   Start (5/2/2017 6:20:54 PM)
   Running Repair Under Current User Account
   Done (5/2/2017 6:20:58 PM)

13 - Repair Network
   Start (5/2/2017 6:20:58 PM)

Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\services.7z
Done,  0.13 seconds.

   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:21:04 PM)

14 - Remove Temp Files
   Start (5/2/2017 6:21:04 PM)
   Running Repair Under System Account
   Done (5/2/2017 6:21:06 PM)

15 - Repair Proxy Settings
   Start (5/2/2017 6:21:06 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:21:08 PM)

17 - Repair Windows Updates
   Start (5/2/2017 6:21:08 PM)

Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\services.7z
Done,  0.14 seconds.

   Running Repair Under Current User Account
   Running Repair Under System Account
   Setting Windows Updates Files That Are In Use To Be Removed At Next Boot.
   Done (5/2/2017 6:21:35 PM)

18 - Repair CD/DVD Missing/Not Working
   Start (5/2/2017 6:21:35 PM)
   iTunes and GEARAspiWDM.sys was found, adding UpperFilters for iTunes Reg Key
   UpperFilters added?: True
   Done (5/2/2017 6:21:35 PM)

19 - Repair Volume Shadow Copy Service
   Start (5/2/2017 6:21:35 PM)

Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\services.7z
Done,  0.13 seconds.

   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:21:56 PM)

20 - Repair Windows Sidebar/Gadgets
   Start (5/2/2017 6:21:56 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:21:58 PM)

21 - Repair MSI (Windows Installer)
   Start (5/2/2017 6:21:58 PM)

Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\services.7z
Done,  0.14 seconds.

   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:09 PM)

22 - Repair Windows Snipping Tool
   Start (5/2/2017 6:22:09 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:11 PM)

23.01 - Repair bat Association
   Start (5/2/2017 6:22:11 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:13 PM)

23.02 - Repair cmd Association
   Start (5/2/2017 6:22:13 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:15 PM)

23.03 - Repair com Association
   Start (5/2/2017 6:22:15 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:18 PM)

23.04 - Repair Directory Association
   Start (5/2/2017 6:22:18 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:20 PM)

23.05 - Repair Drive Association
   Start (5/2/2017 6:22:20 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:22 PM)

23.06 - Repair exe Association
   Start (5/2/2017 6:22:22 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:24 PM)

23.07 - Repair Folder Association
   Start (5/2/2017 6:22:24 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:26 PM)

23.08 - Repair inf Association
   Start (5/2/2017 6:22:26 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:28 PM)

23.09 - Repair lnk (Shortcuts) Association
   Start (5/2/2017 6:22:28 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:31 PM)

23.10 - Repair msc Association
   Start (5/2/2017 6:22:31 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:33 PM)

23.11 - Repair reg Association
   Start (5/2/2017 6:22:33 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:35 PM)

23.12 - Repair scr Association
   Start (5/2/2017 6:22:35 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:37 PM)

24 - Repair Windows Safe Mode
   Start (5/2/2017 6:22:37 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:39 PM)

25 - Repair Print Spooler
   Start (5/2/2017 6:22:39 PM)

Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\services.7z
Done,  0.13 seconds.

   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:45 PM)

26 - Restore Important Windows Services
   Start (5/2/2017 6:22:45 PM)

Decompressing & Updating Windows Permission File C:\Users\kathy\Desktop\tweaking.com_windows_repair_aio\Tweaking.com - Windows Repair\files\permissions\7\services.7z
Done,  0.14 seconds.

   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:22:51 PM)

27 - Set Windows Services To Default Startup
   Start (5/2/2017 6:22:51 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:23:00 PM)

28.01 - Repair Windows 8/10 App Store
   Skipping Repair.
   Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
   Current version: 6.1.7601.23742

29 - Repair Windows 8/10 Component Store
   Skipping Repair.
   Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
   Current version: 6.1.7601.23742

30 - Restore Windows 8/10 COM+ Unmarshalers
   Skipping Repair.
   Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
   Current version: 6.1.7601.23742

31 - Repair Windows 'New' Submenu
   Start (5/2/2017 6:23:00 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:23:02 PM)

32 - Restore UAC (User Account Control) Settings
   Start (5/2/2017 6:23:02 PM)
   Running Repair Under Current User Account
   Running Repair Under System Account
   Done (5/2/2017 6:23:04 PM)

33 - Repair Performance Counters
   Start (5/2/2017 6:23:04 PM)
   Running Repair Under Current User Account
   Done (5/2/2017 6:23:10 PM)

Cleaning up empty logs…

All Selected Repairs Done.
   Done at (5/2/2017 6:23:10 PM)
   Total Repair Time: 00:16:55
 

gonna search around and see now things are     will let you know