Spyware / Malware / Virus Removal

Cookies not saved in browsers (rootkit found on aswMBR scan)

37 min read

Looking for the outcome? Ask AI

KelRenBen36 Topic Starter

Post #1March 25, 2019, 7:13 PM UTC

Logging into a bank page prompts for security questions every time, even after checking the Remember Me box. Same result on different browsers. Used to work fine.

Run date: 2019-03-25 11:48:57

—————————–

11:48:57.441 OS Version: Windows 6.1.7601 Service Pack 1

11:48:57.441 Number of processors: 2 586 0xF02

11:48:57.441 ComputerName: KELLY-PC UserName: Kelly

11:49:12.831 Initialize success

11:49:12.863 VM: initialized successfully

11:49:12.863 VM: Intel CPU BiosDisabled

11:53:54.019 AVAST engine defs: 17030301

11:55:04.795 Disk 0 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2

11:55:04.799 Disk 0 Vendor: ST3750640NS 3CNR Size: 715404MB BusType: 3

11:55:04.805 Disk 1 (boot) \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T0L0-0

11:55:04.809 Disk 1 Vendor: Samsung_SSD_840_EVO_120GB EXT0AB0Q Size: 114473MB BusType: 3

11:55:04.825 Disk 1 MBR read successfully

11:55:04.829 Disk 1 MBR scan

11:55:04.840 Disk 1 Windows 7 default MBR code

11:55:04.845 Disk 1 Partition 1 80 (A) 07 HPFS/NTFS NTFS 150 MB offset 2048

11:55:04.852 Disk 1 default boot code

11:55:04.863 Disk 1 Partition 2 00 07 HPFS/NTFS NTFS 114322 MB offset 309267

11:55:04.874 Disk 1 scanning sectors +234441648

11:55:05.136 Disk 1 scanning C:\Windows\system32\drivers

11:55:11.808 Service scanning

11:55:13.148 Service BdDci C:\Windows\system32\DRIVERS\bddci.sys **LOCKED** 5

11:55:25.625 Modules scanning

11:55:25.634 Disk 1 trace - called modules:

11:55:25.643 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS intelide.sys PCIIDEX.SYS atapi.sys

11:55:25.651 1 nt!IofCallDriver -> \Device\Harddisk1\DR1[0x865b3030]

11:55:25.658 3 CLASSPNP.SYS[8ba6c59e] -> nt!IofCallDriver -> [0x860e9c10]

11:55:25.664 5 ACPI.sys[8b2283e4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x857b8908]

11:55:25.960 AVAST engine scan C:\Windows

11:55:26.973 AVAST engine scan C:\Windows\system32

11:55:35.368 File: C:\Windows\system32\csrsrv.dll **INFECTED** Win32:Aluroot-B [Rtk]

11:57:12.088 AVAST engine scan C:\Windows\system32\drivers

11:57:19.101 AVAST engine scan C:\Users\Kelly

11:58:45.599 AVAST engine scan C:\ProgramData

11:59:10.210 Disk 1 statistics 3314069/0/0 @ 29.37 MB/s

11:59:10.224 Scan finished successfully

12:02:56.962 Disk 1 MBR has been saved successfully to "C:\Users\Kelly\Desktop\MBR.dat"

12:02:56.973 The log file has been saved successfully to "C:\Users\Kelly\Desktop\aswMBR.txt"

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-03-2019

Ran by [removed] (administrator) on KELLY-PC (25-03-2019 12:06:36)

Running from C:\Users\[removed]\Desktop

[removed]

Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wisptis.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wisptis.exe

(Acronis, Inc -> Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe

(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

(Paramount Software UK Ltd -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\MacriumService.exe

(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Windows\RtHDVCpl.exe

(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation -> Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxpers.exe

(Acronis, Inc -> Acronis) C:\Program Files\Acronis\TrueImageWorkstation\TrueImageMonitor.exe

(Acronis, Inc -> Acronis) C:\Program Files\Acronis\TrueImageWorkstation\TimounterMonitor.exe

(Acronis, Inc -> Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe

(ZTE CORPORATION -> ) C:\Program Files\Hostless Modem\Mobile Hotspot Admin\CheckNDISPort_df.exe

(Realtek Semiconductor Corp -> Realtek) C:\Program Files\Realtek\USB Wireless LAN Utility\RtlService.exe

(ZTE CORPORATION -> ) C:\Program Files\Hostless Modem\Mobile Hotspot Admin\CancelAutoPlay_df.exe

(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe

(Realtek Semiconductor Corp -> ) C:\Windows\runSW.exe

(Realtek Semiconductor Corp.) [File not signed] C:\Program Files\Realtek\USB Wireless LAN Utility\RtWLan.exe

(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe

(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe

(Realtek Semiconductor Corp -> Realtek) C:\Windows\SwUSB.exe

(CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] C:\Program Files\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\TrayTipAgentE.exe

(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe

(Oracle America, Inc. -> Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(OLYMPUS IMAGING CORP. -> OLYMPUS IMAGING CORP.) C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe

(Polyclef Software -> Mobile Stream) C:\Program Files\Mobile Stream\EasyTether\easytthr.exe

(Logitech -> Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe

(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

(WinZip Computing LLC -> Nico Mak Computing) C:\Program Files\WinZip\WZUpdateNotifier.exe

(WinZip Computing LLC -> WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe

(WinZip Computing LLC -> Nico Mak Computing) C:\Program Files\WinZip\FAHWindow32.exe

(Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe

(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe

(Wacom Technology Corp. -> Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe

(Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe

(Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe

(Tweaking LLC -> Tweaking.com) C:\Program Files\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe

(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer.exe

(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files\TeamViewer\tv_w32.exe

(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe

(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(Oracle America, Inc. -> Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe

(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsserv.exe

(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe

(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdagent.exe

(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe

(HP Inc. -> HP Inc.) C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe

(Google LLC -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6183456 2008-06-13] (Realtek Semiconductor Corp -> Realtek Semiconductor)

HKLM\…\Run: [TrueImageMonitor.exe] => C:\Program Files\Acronis\TrueImageWorkstation\TrueImageMonitor.exe [1129232 2007-01-31] (Acronis, Inc -> Acronis)

HKLM\…\Run: [AcronisTimounterMonitor] => C:\Program Files\Acronis\TrueImageWorkstation\TimounterMonitor.exe [1862112 2007-01-31] (Acronis, Inc -> Acronis)

HKLM\…\Run: [Acronis Scheduler2 Service] => C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [140832 2007-01-31] (Acronis, Inc -> Acronis)

HKLM\…\Run: [OV3_Monitor] => C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe [55656 2013-07-29] (OLYMPUS IMAGING CORP. -> OLYMPUS IMAGING CORP.)

HKLM\…\Run: [CheckNDISPortf0ac3e] => C:\Program Files\Hostless Modem\Mobile Hotspot Admin\CheckNDISPort_df.exe [465664 2014-03-26] (ZTE CORPORATION -> )

HKLM\…\Run: [CancelAutoPlay_df] => C:\Program Files\Hostless Modem\Mobile Hotspot Admin\CancelAutoPlay_df.exe [446720 2014-03-26] (ZTE CORPORATION -> )

HKLM\…\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)

HKLM\…\Run: [] => [X]

HKLM\…\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [2312824 2015-08-25] (Logitech Inc -> Logitech, Inc.)

HKLM\…\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [1433944 2016-10-14] (Logitech -> Logitech, Inc.)

HKLM\…\Run: [EaseUS EPM Tray Agent] => C:\Program Files\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\TrayTipAgentE.exe [255072 2014-11-18] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed]

HKLM\…\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [601424 2018-10-06] (Oracle America, Inc. -> Oracle Corporation)

HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\Run: [OV3_Monitor] => C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe [420200 2013-07-29] (OLYMPUS IMAGING CORP. -> OLYMPUS IMAGING CORP.)

HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\Run: [QuickenScheduledUpdates] => C:\Program Files\Quicken\bagent.exe [77184 2019-02-20] (Quicken, Inc. -> Quicken Inc.)

HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\Run: [EasyTether] => C:\Program Files\Mobile Stream\EasyTether\easytthr.exe [62464 2015-11-22] (Polyclef Software -> Mobile Stream)

HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\Run: [RogueKiller Anti-Malware] => C:\Program Files\RogueKiller\RogueKiller.exe [26997304 2018-12-31] (Adlice -> )

HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [221184 2010-11-20] (Microsoft Windows -> Microsoft Corporation)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\72.0.3626.121\Installer\chrmstp.exe [2019-03-06] (Google LLC -> Google Inc.)

Lsa: [Authentication Packages] msv1_0 relog_ap

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FAH.lnk [2016-03-04]

ShortcutTarget: FAH.lnk -> C:\Program Files\WinZip\FAHConsole.exe (WinZip Computing LLC -> Nico Mak Computing)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2013-10-05]

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2013-08-10]

ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation) [File not signed]

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Update Notifier.lnk [2016-03-04]

ShortcutTarget: Update Notifier.lnk -> C:\Program Files\WinZip\WZUpdateNotifier.exe (WinZip Computing LLC -> Nico Mak Computing)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Preloader.lnk [2016-03-04]

ShortcutTarget: WinZip Preloader.lnk -> C:\Program Files\WinZip\WzPreloader.exe (WinZip Computing LLC -> WinZip Computing, S.L.)

Startup: C:\Users\Kelly\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Ink Alerts - HP DeskJet 2130 series.lnk [2019-03-19]

ShortcutTarget: Monitor Ink Alerts - HP DeskJet 2130 series.lnk -> C:\Program Files\HP\HP DeskJet 2130 series\Bin\HPStatusBL.dll (Hewlett Packard -> Hewlett-Packard Development Company, LP)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.43.1

Tcpip\..\Interfaces\{13C13B63-E31B-4BD8-9090-B08648E77768}: [DhcpNameServer] 192.168.117.1

Tcpip\..\Interfaces\{4B9ACEAC-D5A7-4F2A-9C34-F32FBB654844}: [DhcpNameServer] 192.168.0.1 192.168.0.1

Tcpip\..\Interfaces\{7D8320DE-B1C5-48CA-8137-74E02E1F3A05}: [DhcpNameServer] 192.168.254.254

Tcpip\..\Interfaces\{E31D585E-87F2-44AC-ABF3-F848BEE1AD85}: [DhcpNameServer] 192.168.43.1

Tcpip\..\Interfaces\{E3DD0B0B-2050-4680-958F-F69FF4F3794F}: [DhcpNameServer] 192.168.42.129

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.pogo.com/

HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxps://www.ebay.com/

BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22] (Hewlett-Packard Company -> Hewlett-Packard Co.)

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_191\bin\ssv.dll [2018-10-24] (Oracle America, Inc. -> Oracle Corporation)

BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-25] (Logitech Inc -> Logitech, Inc.)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_191\bin\jp2ssv.dll [2018-10-24] (Oracle America, Inc. -> Oracle Corporation)

BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22] (Hewlett-Packard Company -> Hewlett-Packard Co.)

Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL [1999-03-22] (Microsoft Corporation) [File not signed]

Handler: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL [1999-03-22] (Microsoft Corporation) [File not signed]

Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL [1999-03-22] (Microsoft Corporation) [File not signed]

Handler: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL [1999-03-22] (Microsoft Corporation) [File not signed]

Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL [1999-03-22] (Microsoft Corporation) [File not signed]

Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL [1999-03-22] (Microsoft Corporation) [File not signed]

Handler: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL [1999-03-22] (Microsoft Corporation) [File not signed]

FireFox:

========

FF DefaultProfile: tjtyx2lb.default

FF DefaultProfile: 2ajazt3o.default

FF ProfilePath: C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\tjtyx2lb.default [2019-02-21]

FF Extension: (Flash Video Downloader) - C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\tjtyx2lb.default\Extensions\[removed] [2019-02-15]

FF ProfilePath: C:\Users\Kelly\AppData\Roaming\Moonchild Productions\Pale Moon\Profiles\2ajazt3o.default [2019-03-24]

FF Homepage: Moonchild Productions\Pale Moon\Profiles\2ajazt3o.default -> hxxps://www.pogo.com/

FF Session Restore: Moonchild Productions\Pale Moon\Profiles\2ajazt3o.default -> is enabled.

FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: (HP Smart Web Printing) - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-10-05] [Legacy] [not signed]

FF HKLM\…\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt

FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2016-03-08] [Legacy] [not signed]

FF HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\Firefox\Extensions: [[removed]] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_32_0_0_156.dll [2019-03-13] (Adobe Systems Incorporated -> )

FF Plugin: @java.com/DTPlugin,version=11.191.2 -> C:\Program Files\Java\jre1.8.0_191\bin\dtplugin\npDeployJava1.dll [2018-10-24] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.191.2 -> C:\Program Files\Java\jre1.8.0_191\bin\plugin2\npjp2.dll [2018-10-24] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.)

FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-09-22] (VideoLAN) [File not signed]

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-09-19] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

Chrome:

=======

CHR DefaultProfile: Default

CHR Profile: C:\Users\Kelly\AppData\Local\Google\Chrome\User Data\Default [2019-03-25]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Kelly\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-01-01]

CHR Extension: (Chrome Media Router) - C:\Users\Kelly\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-03-19]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AcronisOSSReinstallSvc; C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe [2217416 2007-02-22] (Acronis, Inc -> )

R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [407072 2007-01-31] (Acronis, Inc -> Acronis)

R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [347512 2018-12-06] (HP Inc. -> HP Inc.)

R2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-21] (HP Inc. -> HP Inc.)

R2 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [3139328 2017-10-19] (Paramount Software UK Ltd -> Paramount Software UK Ltd)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [5247944 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44544 2008-12-03] (Hewlett-Packard) [File not signed]

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-12-03] (Hewlett-Packard) [File not signed]

R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1293936 2018-11-15] (Bitdefender SRL -> Bitdefender)

R2 RealtekWlanU; C:\Program Files\Realtek\USB Wireless LAN Utility\RtlService.exe [48856 2014-05-19] (Realtek Semiconductor Corp -> Realtek)

S2 RTLDHCPService; C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe [262360 2014-04-23] (Realtek Semiconductor Corp -> Realtek)

R2 RunSwUSB; C:\Windows\runSW.exe [44760 2014-12-12] (Realtek Semiconductor Corp -> )

R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-15] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)

R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [7757552 2018-02-26] (TeamViewer GmbH -> TeamViewer GmbH)

R2 updatesrv; C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe [240936 2018-11-14] (Bitdefender SRL -> Bitdefender)

R2 vsserv; C:\Program Files\Bitdefender Antivirus Free\vsserv.exe [320928 2018-11-14] (Bitdefender SRL -> Bitdefender)

R2 vsservppl; C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe [240936 2018-11-14] (Bitdefender SRL -> Bitdefender)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Windows -> Microsoft Corporation)

R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [1781192 2018-12-19] (Wacom Technology Corporation -> Wacom Technology, Corp.)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 atc; C:\Windows\System32\DRIVERS\atc.sys [1115744 2019-01-31] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)

R2 BdDci; C:\Windows\System32\DRIVERS\bddci.sys [254880 2019-01-31] (Bitdefender SRL -> Bitdefender)

S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [109456 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

R3 easytether; C:\Windows\System32\DRIVERS\easytthr.sys [18632 2015-11-22] (Polyclef Software -> Mobile Stream)

R3 edrsensor; C:\Windows\System32\DRIVERS\edrsensor.sys [241840 2019-01-31] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)

S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [21496 2016-01-14] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed]

R0 EPMVolFlt; C:\Windows\System32\drivers\EPMVolFlt.sys [17736 2017-11-23] (CHENGDU YIWO Tech Development Co., Ltd. -> Windows (R) Codename Longhorn DDK provider)

S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10208 2016-07-11] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed]

R1 Gemma; C:\Windows\System32\DRIVERS\Gemma.sys [317808 2019-01-31] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)

R0 gzflt; C:\Windows\System32\drivers\gzflt.sys [211248 2019-01-31] (Bitdefender SRL -> BitDefender LLC)

R3 igfx; C:\Windows\System32\DRIVERS\igdkmd32.sys [4808192 2009-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)

R3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [52368 2015-06-17] (Logitech Inc -> Logitech, Inc.)

R3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [20240 2015-06-17] (Logitech Inc -> Logitech, Inc.)

R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [240440 2019-03-19] (Malwarebytes Corporation -> Malwarebytes)

R0 pssnap; C:\Windows\System32\DRIVERS\pssnap.sys [16016 2015-10-12] (Paramount Software UK Ltd -> Windows (R) Win 7 DDK provider)

R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [2928856 2015-12-28] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation )

S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [147344 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

R2 tifsfilter; C:\Windows\System32\DRIVERS\tifsfilt.sys [39712 2013-08-12] (Acronis, Inc -> Acronis)

R2 trufos; C:\Windows\System32\drivers\trufos.sys [522280 2019-01-31] (Bitdefender SRL -> Bitdefender)

S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [15872 2013-02-11] (Microsoft Windows -> Microsoft Corporation)

R3 WacHidRouterPro; C:\Windows\System32\DRIVERS\wachidrouter.sys [100248 2018-12-19] (Microsoft Windows Hardware Compatibility Publisher -> Wacom Technology, Corp.)

R3 wacomrouterfilter; C:\Windows\System32\DRIVERS\wacomrouterfilter.sys [15768 2018-12-19] (Microsoft Windows Hardware Compatibility Publisher -> Wacom Technology, Corp.)

U3 aswMBR; \??\C:\Users\Kelly\AppData\Local\Temp\aswMBR.sys [X] <==== ATTENTION

U3 aswVmm; \??\C:\Users\Kelly\AppData\Local\Temp\aswVmm.sys [X] <==== ATTENTION

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-03-25 12:06 - 2019-03-25 12:07 - 000023880 _____ C:\Users\Kelly\Desktop\FRST.txt

2019-03-25 12:06 - 2019-03-25 12:06 - 000000000 ____D C:\FRST

2019-03-25 12:04 - 2019-03-25 12:05 - 001793024 _____ (Farbar) C:\Users\Kelly\Desktop\FRST.exe

2019-03-25 12:02 - 2019-03-25 12:02 - 000002492 _____ C:\Users\Kelly\Desktop\aswMBR.txt

2019-03-25 12:02 - 2019-03-25 12:02 - 000000512 _____ C:\Users\Kelly\Desktop\MBR.dat

2019-03-25 11:48 - 2019-03-25 11:48 - 005198336 _____ (AVAST Software) C:\Users\Kelly\Desktop\aswMBR.exe

2019-03-19 18:27 - 2019-03-19 18:27 - 000240440 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys

2019-03-14 13:16 - 2019-03-14 13:16 - 001175278 _____ C:\Users\Kelly\Downloads\winter (1).pdf

2019-03-14 13:15 - 2019-03-14 13:15 - 001175278 _____ C:\Users\Kelly\Downloads\winter.pdf

2019-03-06 14:08 - 2019-03-06 14:08 - 000122146 _____ C:\Users\Kelly\Downloads\UPS CampusShip - 101207652.pdf

2019-03-06 14:08 - 2019-03-06 14:08 - 000122146 _____ C:\Users\Kelly\Downloads\UPS CampusShip - 101207652 (1).pdf

2019-02-23 20:52 - 2019-03-19 18:26 - 000128552 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae.sys

2019-02-23 20:52 - 2019-02-23 20:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-03-25 04:09 - 2009-07-13 21:34 - 000021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2019-03-25 04:09 - 2009-07-13 21:34 - 000021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2019-03-24 09:19 - 2018-02-11 19:24 - 000000320 _____ C:\Windows\Tasks\HPCeeScheduleForKelly.job

2019-03-22 20:40 - 2019-01-05 19:06 - 000000000 ____D C:\Users\Kelly\AppData\Roaming\WTablet

2019-03-22 19:46 - 2018-08-30 20:07 - 000000000 ____D C:\Users\Kelly\AppData\Local\CrashDumps

2019-03-21 21:19 - 2013-10-16 17:18 - 000000000 ____D C:\Users\Kelly\AppData\Local\HP

2019-03-21 09:53 - 2018-07-27 18:35 - 000000000 ____D C:\Program Files\Bitdefender Antivirus Free

2019-03-19 18:29 - 2010-11-20 14:01 - 000781298 _____ C:\Windows\system32\PerfStringBackup.INI

2019-03-19 18:29 - 2009-07-13 19:37 - 000000000 ____D C:\Windows\inf

2019-03-19 18:22 - 2009-07-13 21:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2019-03-19 18:16 - 2013-10-03 18:15 - 000000000 ____D C:\Users\Kelly\AppData\Local\ElevatedDiagnostics

2019-03-13 02:05 - 2015-04-19 17:17 - 000842240 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2019-03-13 02:05 - 2015-04-19 17:17 - 000175104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2019-03-13 02:05 - 2013-08-10 17:09 - 000000000 ____D C:\Windows\system32\Macromed

2019-03-10 20:56 - 2013-11-15 21:26 - 000000000 ____D C:\Users\Kelly\Documents\Descriptions of charm bracelet, Elgin watch

2019-03-06 15:00 - 2015-03-14 15:27 - 000002177 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2019-03-02 14:53 - 2018-07-23 20:31 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service

2019-03-02 14:53 - 2018-07-23 20:31 - 000000000 ____D C:\Program Files\Mozilla Firefox

2019-02-23 20:53 - 2013-08-12 19:10 - 000000000 ____D C:\ProgramData\Malwarebytes

==================== Files in the root of some directories =======

2013-08-11 17:48 - 2014-06-09 15:57 - 000198512 _____ () C:\Users\Kelly\Quicken 2008newOFXLOG.DAT

2013-08-11 17:48 - 2014-04-13 16:25 - 002218832 _____ () C:\Users\Kelly\Quicken 2008newOFXOLD.DAT

2016-12-01 13:59 - 2016-11-30 13:02 - 000012542 _____ () C:\Program Files\Common Files\client.wyc

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\system32\dllhost.exe => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2019-03-24 00:26

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 17-03-2019

Ran by [removed] (25-03-2019 12:07:50)

Running from C:\Users\[removed]\Desktop

Microsoft Windows 7 Home Premium Service Pack 1 (X86) (2013-08-07 03:26:02)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2863067232-3147982578-4033237767-500 - Administrator - Disabled)

ericjs (S-1-5-21-2863067232-3147982578-4033237767-1003 - Administrator - Enabled)

Guest (S-1-5-21-2863067232-3147982578-4033237767-501 - Limited - Enabled)

HomeGroupUser$ (S-1-5-21-2863067232-3147982578-4033237767-1002 - Limited - Enabled)

Kelly (S-1-5-21-2863067232-3147982578-4033237767-1000 - Administrator - Enabled) => C:\Users\Kelly

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Bitdefender Antivirus Free Antimalware (Enabled - Up to date) {EA21BCE8-A461-99C3-3A0D-4C964E75494E}

AS: Bitdefender Antivirus Free Antimalware (Enabled - Up to date) {51405D0C-825B-964D-00BD-77E435F203F3}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (HKLM\…\{92127AF5-FDD8-4ADF-BC40-C356C9EE0B7D}) (Version: 6.1.1 - Hewlett-Packard) Hidden

Acronis Disk Director Suite (HKLM\…\{2300EE96-0A41-4FAB-BD03-989EC44577A0}) (Version: 10.0.2160 - Acronis)

Acronis True Image Workstation (HKLM\…\{2545228C-6A70-4A01-B936-6DA77984D298}) (Version: 9.1.3887 - Acronis)

Adobe Acrobat Reader DC (HKLM\…\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 18.011.20063 - Adobe Systems Incorporated)

Adobe Flash Player 32 ActiveX (HKLM\…\Adobe Flash Player ActiveX) (Version: 32.0.0.156 - Adobe Systems Incorporated)

Adobe Flash Player 32 NPAPI (HKLM\…\Adobe Flash Player NPAPI) (Version: 32.0.0.156 - Adobe Systems Incorporated)

Amazon Kindle (HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\Amazon Kindle) (Version: 1.14.0.43019 - Amazon)

Bejeweled 2 Deluxe® (HKLM\…\Bejeweled 2 Deluxe®) (Version: 32.0.0.0 - Shockwave.com)

Bitdefender Agent (HKLM\…\Bitdefender Agent) (Version: 21.0.25.59 - Bitdefender)

Bitdefender Antivirus Free (HKLM\…\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}) (Version: 1.0.12.41 - Bitdefender)

BufferChm (HKLM\…\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden

Cisco EAP-FAST Module (HKLM\…\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM\…\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM\…\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)

Copy (HKLM\…\{9BE466FF-70B7-4DA8-807C-DB4C3610FDAA}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden

Destinations (HKLM\…\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.77.000 - Hewlett-Packard) Hidden

DeviceDiscovery (HKLM\…\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden

EaseUS Partition Master 12.8 (HKLM\…\EaseUS Partition Master_is1) (Version: - EaseUS)

EasyTether (HKLM\…\{126F8B16-3BE0-4D4F-B9DB-61B49AA793B1}) (Version: 1.3.3 - Mobile Stream) Hidden

EasyTether (HKLM\…\{6f3b40d5-c81b-469b-a7a2-b560f8561a8c}) (Version: 1.3.3 - Mobile Stream)

EasyTether ADB USB driver (HKLM\…\{D68C899F-0BEC-4C3F-897D-0F0390894D4A}) (Version: 1.0.6 - Mobile Stream)

Google Chrome (HKLM\…\Google Chrome) (Version: 72.0.3626.121 - Google Inc.)

Google Update Helper (HKLM\…\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden

Google Update Helper (HKLM\…\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden

GPBaseService2 (HKLM\…\{BB3447F6-9553-4AA9-960E-0DB5310C5779}) (Version: 140.0.211.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 14.0 (HKLM\…\HPExtendedCapabilities) (Version: 14.0 - HP)

HP DeskJet 2130 series Basic Device Software (HKLM\…\{8BECF3A4-E3DF-4A75-BB74-C7A50443A019}) (Version: 35.0.61.54677 - Hewlett-Packard Co.)

HP DeskJet 2130 series Help (HKLM\…\{1CDFD3C9-BDF8-4DDC-BDA2-EBC53F938B5F}) (Version: 35.0.0 - Hewlett Packard)

HP Imaging Device Functions 14.0 (HKLM\…\HP Imaging Device Functions) (Version: 14.0 - HP)

HP Photo Creations (HKLM\…\HP Photo Creations) (Version: 1.0.0.2024 - HP Photo Creations Powered by RocketLife)

HP Smart Web Printing 4.60 (HKLM\…\HP Smart Web Printing) (Version: 4.60 - HP)

HP Solution Center 14.0 (HKLM\…\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)

HP Support Solutions Framework (HKLM\…\{F6A11738-3EE4-4573-AEA5-6CD5D491C167}) (Version: 12.10.49.21 - Hewlett-Packard Company)

HP Touchpoint Analytics Client (HKLM\…\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}) (Version: 4.0.2.1439 - HP Inc.)

HP Update (HKLM\…\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)

HPProductAssistant (HKLM\…\{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden

HPSSupply (HKLM\…\{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}) (Version: 140.0.211.000 - Hewlett-Packard) Hidden

IncrediMail (HKLM\…\{35505AE1-27E2-4206-B3BF-58771803B8D0}) (Version: 6.6.0.5288 - IncrediMail) Hidden

Intel(R) Graphics Media Accelerator Driver (HKLM\…\HDMI) (Version: 8.15.10.1930 - Intel Corporation)

Java 8 Update 191 (HKLM\…\{26A24AE4-039D-4CA4-87B4-2F32180191F0}) (Version: 8.0.1910.12 - Oracle Corporation)

Logitech SetPoint 6.67 (HKLM\…\sp6) (Version: 6.67.83 - Logitech)

Logitech Unifying Software 2.50 (HKLM\…\Logitech Unifying) (Version: 2.50.25 - Logitech)

Macrium Reflect Free Edition (HKLM\…\{EF9A9E57-9506-45D7-9C36-0ACC3341F737}) (Version: 6.3.1849 - Paramount Software (UK) Ltd.) Hidden

Macrium Reflect Free Edition (HKLM\…\MacriumReflect) (Version: 6.3 - Paramount Software (UK) Ltd.)

Malwarebytes version 3.7.1.2839 (HKLM\…\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes)

MarketResearch (HKLM\…\{D360FA88-17C8-4F14-B67F-13AAF9607B12}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden

Marxio Timer 1.11 (HKLM\…\Marxio Timer_is1) (Version: - marxio-tools)

Microsoft .NET Framework 4.7.2 (HKLM\…\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation)

Microsoft Office 2000 Premium (HKLM\…\{00000409-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2720 - Microsoft Corporation)

Microsoft Silverlight (HKLM\…\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\…\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mobile Hotspot Admin (HKLM\…\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.2 - ZTE Corporation)

Mozilla Firefox 65.0.1 (x86 en-US) (HKLM\…\Mozilla Firefox 65.0.1 (x86 en-US)) (Version: 65.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM\…\MozillaMaintenanceService) (Version: 65.0.1.6981 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM\…\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\…\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP2 Parser and SDK (HKLM\…\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)

OLYMPUS Digital Camera Updater (HKLM\…\{2A9E8F56-C31B-4DBB-BFE2-0F4EC8192355}) (Version: 1.0.3 - OLYMPUS IMAGING CORP.)

OLYMPUS Viewer 3 (HKLM\…\{B8737126-7348-4F84-93BF-D4A82E653CA7}) (Version: 1.1.0 - OLYMPUS IMAGING CORP.)

Paint Shop Pro 7 Try And Buy (HKLM\…\{D6DE02C7-1F47-11D4-9515-00105AE4B89A}) (Version: 7.0.4.0000 - Jasc Software Inc)

Pale Moon 28.4.0 (x86 en-US) (HKLM\…\Pale Moon 28.4.0 (x86 en-US)) (Version: 28.4.0 - Moonchild Productions)

Product Improvement Study for HP DeskJet 2130 series (HKLM\…\{EFF29656-8F1A-4043-B2D0-9FB4619B45AF}) (Version: 35.0.61.54677 - Hewlett-Packard Co.)

Quicken 2017 (HKLM\…\{E5AE4F66-CDA1-432A-A69E-C685D454ABDA}) (Version: 26.1.19.1 - Quicken)

Realtek High Definition Audio Driver (HKLM\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5645 - Realtek Semiconductor Corp.)

REALTEK Wireless LAN Driver and Utility (HKLM\…\{9C049509-055C-4CFF-A116-1D12312225EB}) (Version: 1.00.0267 - REALTEK Semiconductor Corp.)

RogueKiller version 13.0.20.0 (HKLM\…\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 13.0.20.0 - Adlice Software)

Samsung USB Driver for Mobile Phones (HKLM\…\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)

Serif CraftArtist (HKLM\…\{C1B148C9-FACF-45F1-8356-4E1C5E3DAA5B}) (Version: 1.0.6.046 - Serif (Europe) Ltd)

Serif CraftArtist Greeting Cards Collection (HKLM\…\{7C08721F-AC43-4198-A35B-93442DD10A26}) (Version: 1.0.2.014 - Serif (Europe) Ltd)

Serif Digital Scrapbook Artist 2 (HKLM\…\{1439B98F-681E-4D51-BB90-D04474E4C6EA}) (Version: 2.0.0.011 - Serif (Europe) Ltd)

Serif PagePlus Essentials (HKLM\…\{26F8F39E-C228-4E3C-93A5-061FCCBFC914}) (Version: 1.0.0.004 - Serif (Europe) Ltd)

Serif PhotoPlus Essentials (HKLM\…\{350FBF89-ED3D-48F9-90CC-A04A96E9F7AD}) (Version: 1.0.0.002 - Serif (Europe) Ltd)

Serif Scan, Stitch and Share (HKLM\…\{7395C21A-6E14-4A48-922C-29C6B61AEF36}) (Version: 1.0.0.010 - Serif (Europe) Ltd)

Shop for HP Supplies (HKLM\…\Shop for HP Supplies) (Version: 14.0 - HP)

Skype Click to Call (HKLM\…\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)

SmartWebPrinting (HKLM\…\{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}) (Version: 140.0.186.000 - Hewlett-Packard) Hidden

SolutionCenter (HKLM\…\{5DCF0E4B-F8EA-4229-A0BD-5CA6D4AFB749}) (Version: 140.0.213.000 - Hewlett-Packard) Hidden

SpywareBlaster 5.5 (HKLM\…\SpywareBlaster_is1) (Version: 5.5.0 - BrightFort LLC)

Status (HKLM\…\{2FB9EA69-51D4-4913-9AD5-762C034DE811}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden

swMSM (HKLM\…\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

TeamViewer 11 (HKLM\…\TeamViewer) (Version: 11.0.93231 - TeamViewer)

TrayApp (HKLM\…\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden

Tweaking.com - Windows Repair (HKLM\…\Tweaking.com - Windows Repair) (Version: 4.0.24 - Tweaking.com)

VLC media player 2.1.0 (HKLM\…\VLC media player) (Version: 2.1.0 - VideoLAN)

Wacom Tablet (HKLM\…\Wacom Tablet Driver) (Version: 6.3.32-4 - Wacom Technology Corp.)

Windows Driver Package - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\…\E77704EF5E71F4F18CADFBFA68595AFE036D5D97) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)

WinZip 20.0 (HKLM\…\{CD95F661-A5C4-44F5-A6AA-ECDD91C240EE}) (Version: 20.0.11659 - WinZip Computing, S.L. )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2015-10-12] (Paramount Software UK Ltd -> Paramount Software UK Ltd)

ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshlstb.dll [2015-10-27] (WinZip Computing LLC -> WinZip Computing, S.L.)

ContextMenuHandlers2: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2015-10-12] (Paramount Software UK Ltd -> Paramount Software UK Ltd)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshlstb.dll [2015-10-27] (WinZip Computing LLC -> WinZip Computing, S.L.)

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2009-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshlstb.dll [2015-10-27] (WinZip Computing LLC -> WinZip Computing, S.L.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {163B40A9-FF99-4960-96CD-AD284C20B835} - System32\Tasks\HPCeeScheduleForKelly => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe (Hewlett-Packard Company -> Hewlett-Packard)

Task: {168A3118-57BE-47C7-AB33-CB7E904CEB98} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe (HP Inc. -> HP Inc.)

Task: {269E14E6-2B84-4C9F-8913-CFB2F6372CC2} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe (HP Inc. -> )

Task: {2B0FC664-FA10-4061-84C3-C89F39D785ED} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe (HP Inc. -> HP Inc.)

Task: {313E0FE0-5721-4707-8D1E-85D40101D41B} - System32\Tasks\{9D14D06C-86D4-4B77-B23C-ACB04DCCA21C} => C:\Windows\system32\pcalua.exe -a "C:\Users\Kelly\Documents\NOISYKEY\Setup Keystroke events.exe" -d C:\Users\Kelly\Documents\NOISYKEY

Task: {35E625B9-9625-4261-9783-82A20587CF30} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe (HP Inc. -> HP Inc.)

Task: {414BC97D-1E25-4F22-AABC-4E2CDE5B708D} - System32\Tasks\Macrium-Backup-{42277FA4-C507-49FD-B8F6-CFA681E432E8} => C:\Program Files\Macrium\Reflect\Reflect.exe (Paramount Software UK Ltd -> Paramount Software UK Ltd)

Task: {417BA52E-8518-4C90-9E9D-97CE544D8651} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe (Bitdefender SRL -> Bitdefender)

Task: {4F83D666-096D-4D5F-B1F7-06B5F1E07786} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

Task: {52B39951-CAB8-4DF9-883C-BF8E774E1AD7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe (HP Inc. -> HP Inc.)

Task: {6644BACF-75B3-45CB-8429-40C4F293D93B} - System32\Tasks\HPCustPartic.exe_{3CDCED42-0320-482A-A452-DAD84F59E2BC} => C:\Program Files\HP\HP DeskJet 2130 series\Bin\HPCustPartic.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)

Task: {70977D8B-2211-4069-B3CE-2DFE7BACD59E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe (HP Inc. -> HP Inc.)

Task: {754D2583-743B-478A-89A5-0F26CE9E644F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)

Task: {761A1DD7-42A4-4AAF-B1D9-58C892BF695A} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2863067232-3147982578-4033237767-1000

Task: {8407D568-69B9-4172-89D5-49FA76098591} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe (Tweaking LLC -> Tweaking.com)

Task: {8C7CED41-A967-45C0-AD33-70839ACC1C2F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe (HP Inc. -> HP Inc.)

Task: {C351D1B4-E611-40DA-8764-D98FA1984751} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\system32\Macromed\Flash\FlashUtil32_32_0_0_156_Plugin.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)

Task: {CCB4ED9F-CAB2-42D4-A39D-7636B010B759} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)

Task: {E3E84C62-9B23-45DC-96D4-A79C252CE971} - System32\Tasks\HPCustParticipation HP DeskJet 2130 series => C:\Program Files\HP\HP DeskJet 2130 series\Bin\HPCustPartic.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)

Task: {EC39BA1D-56C7-43FA-B618-E66137F7A876} - System32\Tasks\{BB0EE357-10FA-4B1C-A910-4CFAF18582C9} => C:\Windows\system32\pcalua.exe -a D:\Setup.exe -d D:\

Task: {F27F4DDA-5130-43F4-ACED-5A2C7FD042AE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe (HP Inc. -> HP Inc.)

Task: {F509EB99-B1B1-433E-AC05-EA23AB9BC4E1} - System32\Tasks\Macrium-Backup-{D95DA6AF-1CF8-4C4B-83E4-2494F63863AB} => C:\Program Files\Macrium\Reflect\Reflect.exe (Paramount Software UK Ltd -> Paramount Software UK Ltd)

Task: {F6DEECEB-32AB-4982-9E67-18FD2DE6B084} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)

Task: {FE1B548E-358F-4FF2-8CED-8B38859D5655} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_CN66S491ZR => C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe (HP Inc. -> HP Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\HPCeeScheduleForKelly.job => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe

Task: C:\Windows\Tasks\Macrium-Backup-{42277FA4-C507-49FD-B8F6-CFA681E432E8}.job => C:\Program Files\Macrium\Reflect\Reflect.exej-e -w C:\Users\Kelly\Documents\Reflect\My Backup(1).xml

Task: C:\Windows\Tasks\Macrium-Backup-{D95DA6AF-1CF8-4C4B-83E4-2494F63863AB}.job => C:\Program Files\Macrium\Reflect\Reflect.exej-e -w C:\Users\Kelly\Documents\Reflect\My Backup(1).xml

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2018-04-20 10:20 - 2012-02-14 19:37 - 000535040 _____ () C:\Windows\system32\Rtlihvs.dll

2013-10-05 13:20 - 2008-10-06 15:38 - 000121344 _____ () C:\Windows\System32\hpf3l083.dll

2013-10-05 13:20 - 2008-10-06 15:37 - 000315392 _____ () C:\Windows\system32\spool\PRTPROCS\W32X86\hpfpp083.dll

2008-12-03 20:05 - 2008-12-03 20:05 - 000044544 _____ () c:\windows\system32\hpzinw12.dll

2008-12-03 20:05 - 2008-12-03 20:05 - 000053760 _____ () c:\windows\system32\hpzipm12.dll

2018-04-20 10:20 - 2015-03-19 14:50 - 002011136 _____ () C:\Program Files\Realtek\USB Wireless LAN Utility\RtWLan.exe

2018-04-20 10:20 - 2013-02-27 17:17 - 000221184 _____ () C:\Program Files\Realtek\USB Wireless LAN Utility\EnumDevLib.dll

2018-04-20 10:20 - 2015-03-26 10:39 - 000552960 _____ () C:\Program Files\Realtek\USB Wireless LAN Utility\RtlLib.dll

2018-04-20 10:20 - 2015-03-30 10:39 - 000274432 _____ () C:\Program Files\Realtek\USB Wireless LAN Utility\RtlIhvOid.dll

2018-04-20 10:20 - 2012-09-13 09:25 - 000200704 _____ () C:\Program Files\Realtek\USB Wireless LAN Utility\IpLib.dll

2018-04-20 10:20 - 2009-07-23 17:32 - 001122304 _____ () C:\Program Files\Realtek\USB Wireless LAN Utility\LIBEAY32.dll

2018-04-20 10:20 - 2015-02-05 13:58 - 000098304 _____ () C:\Program Files\Realtek\USB Wireless LAN Utility\RtlICS.dll

2018-04-20 10:20 - 2012-08-08 21:56 - 000863232 _____ () C:\Program Files\Realtek\USB Wireless LAN Utility\P2PLib.dll

2018-04-20 10:20 - 2012-06-22 16:01 - 000044544 _____ () C:\Program Files\Realtek\USB Wireless LAN Utility\RtlQRCode.dll

2018-01-15 16:47 - 2014-11-18 15:44 - 000255072 _____ () C:\Program Files\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\TrayTipAgentE.exe

2018-01-15 16:47 - 2014-02-13 16:27 - 000222792 _____ () C:\Program Files\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\traynet.dll

2018-01-15 16:47 - 2014-02-13 16:27 - 000275528 _____ () C:\Program Files\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\libcurl.dll

2018-01-15 16:47 - 2014-02-13 16:27 - 000113166 _____ () C:\Program Files\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\zlib1.dll

2018-01-15 16:47 - 2014-02-13 16:27 - 000249928 _____ () C:\Program Files\EaseUS\EaseUS Partition Master 12.8\bin\TrayPopupE\uexper.dll

2013-10-21 15:56 - 2013-07-29 19:06 - 000651264 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyUICtl2.dll

2013-10-21 15:56 - 2013-07-29 19:06 - 000045568 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlylwApi2.dll

2013-10-22 19:00 - 2013-10-22 19:00 - 001093120 _____ () C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\MFC80U.DLL

2013-10-21 15:56 - 2013-07-29 19:06 - 000065536 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\olyuiskindrw.dll

2013-10-21 15:56 - 2013-07-29 19:06 - 000053248 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\olycms.dll

2013-10-21 15:56 - 2013-07-29 19:06 - 000027136 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlySkinMgr.dll

2013-10-21 15:56 - 2013-07-29 19:08 - 002224128 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyUIFrw2.dll

2013-10-21 15:56 - 2013-07-29 19:07 - 001105920 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyImgProc2.dll

2013-10-21 15:56 - 2013-06-17 11:18 - 000421888 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\olive.dll

2013-10-22 19:00 - 2013-10-22 19:00 - 000065536 _____ () C:\Windows\WinSxS\x86_microsoft.vc80.openmp_1fc8b3b9a1e18e3b_8.0.50727.6195_none_3b1209fdc9ac7774\vcomp.dll

2013-10-21 15:56 - 2006-09-04 20:26 - 000014336 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\Tracer.dll

2013-10-21 15:56 - 2011-04-25 16:12 - 000118784 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyPalm.dll

2013-10-21 15:56 - 2013-06-07 16:06 - 005799936 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyMuse.dll

2013-10-21 15:56 - 2011-07-21 18:16 - 010186752 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyLaurel.dll

2013-10-21 15:56 - 2003-11-07 11:03 - 000204800 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\PixologyIRISS011.dll

2013-10-21 15:56 - 2013-07-29 19:08 - 000475136 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyImgView.dll

2013-10-21 15:56 - 2013-07-29 19:08 - 000483328 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\FileMgr2.dll

2013-10-21 15:56 - 2013-07-29 19:06 - 000380928 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyDB4.dll

2013-10-21 15:56 - 2011-08-09 15:22 - 000450560 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OSLite.dll

2013-10-21 15:56 - 2013-07-29 19:08 - 000299008 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyDonna.dll

2013-10-21 15:56 - 2013-07-29 19:06 - 000022528 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\glossary.dll

2013-10-21 15:56 - 2013-07-29 19:06 - 000176128 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyDB2.dll

2013-10-21 15:56 - 2012-11-06 17:58 - 000019456 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyIBDB.dll

2013-10-21 15:56 - 2013-07-29 19:06 - 000024576 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyShlOp.dll

2013-10-21 15:56 - 2013-07-29 19:06 - 000057344 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\PluginMgr.dll

2013-10-21 15:56 - 2013-07-29 19:07 - 000126976 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyWMPLib.dll

2013-10-21 15:56 - 2013-07-29 19:06 - 000061456 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyApollo.dll

2013-10-21 15:56 - 2012-12-06 16:37 - 000090112 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyAsLib.dll

2013-10-21 15:57 - 2012-05-22 09:44 - 000503808 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\vedFramework.dll

2013-10-21 15:56 - 2012-10-16 14:42 - 000069632 _____ () C:\Program Files\OLYMPUS\OLYMPUS Viewer 3\OlyRum2.dll

2013-10-22 19:00 - 2013-10-22 19:00 - 000057344 _____ () C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3\MFC80ENU.DLL

2009-11-18 04:42 - 2009-11-18 04:42 - 000048128 _____ () C:\Program Files\HP\Digital Imaging\bin\hpqtra08.rsc

2019-02-23 20:52 - 2019-03-19 18:26 - 003084800 _____ () C:\Program Files\Malwarebytes\Anti-Malware\Qt5Quick.dll

2019-02-23 20:52 - 2019-03-19 18:26 - 005139968 _____ () C:\Program Files\Malwarebytes\Anti-Malware\Qt5Gui.dll

2019-02-23 20:52 - 2019-03-19 18:26 - 005010944 _____ () C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll

2019-02-23 20:52 - 2019-03-19 18:26 - 002950144 _____ () C:\Program Files\Malwarebytes\Anti-Malware\Qt5Qml.dll

2019-02-23 20:52 - 2019-03-19 18:26 - 002234880 _____ () C:\Program Files\Malwarebytes\Anti-Malware\Qt5Network.dll

2019-02-23 20:52 - 2019-03-19 18:26 - 004571648 _____ () C:\Program Files\Malwarebytes\Anti-Malware\Qt5Widgets.dll

2019-02-23 20:52 - 2019-03-19 18:26 - 000438272 _____ () C:\Program Files\Malwarebytes\Anti-Malware\Qt5WinExtras.dll

2019-02-23 20:52 - 2019-03-19 18:26 - 001181184 _____ () C:\Program Files\Malwarebytes\Anti-Malware\platforms\qwindows.dll

2019-02-23 20:52 - 2019-03-19 18:26 - 000124928 _____ () C:\Program Files\Malwarebytes\Anti-Malware\styles\qwindowsvistastyle.dll

2019-03-19 18:26 - 2019-03-19 18:26 - 000026112 _____ () C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qico.dll

2019-03-19 18:26 - 2019-03-19 18:26 - 000020992 _____ () C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qsvg.dll

2019-02-23 20:52 - 2019-03-19 18:26 - 000259584 _____ () C:\Program Files\Malwarebytes\Anti-Malware\Qt5Svg.dll

2019-03-19 18:26 - 2019-03-19 18:26 - 000014848 _____ () C:\Program Files\Malwarebytes\Anti-Malware\QtQuick.2\qtquick2plugin.dll

2019-03-19 18:26 - 2019-03-19 18:26 - 000729088 _____ () C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Controls\qtquickcontrolsplugin.dll

2019-03-19 18:26 - 2019-03-19 18:26 - 000073216 _____ () C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Layouts\qquicklayoutsplugin.dll

2019-03-19 18:26 - 2019-03-19 18:26 - 000179712 _____ () C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Dialogs\dialogplugin.dll

2019-03-19 18:26 - 2019-03-19 18:26 - 000014848 _____ () C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Window.2\windowplugin.dll

2019-03-19 18:26 - 2019-03-19 18:26 - 000014848 _____ () C:\Program Files\Malwarebytes\Anti-Malware\QtQml\Models.2\modelsplugin.dll

2019-03-19 18:26 - 2019-03-19 18:26 - 000101888 _____ () C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\PrivateWidgets\widgetsplugin.dll

2019-02-23 20:52 - 2019-03-19 18:26 - 000035328 _____ () C:\Program Files\Malwarebytes\Anti-Malware\iconengines\qsvgicon.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\008i.com -> 008i.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\008k.com -> 008k.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\00hq.com -> 00hq.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\0190-dialers.com -> 0190-dialers.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\01i.info -> 01i.info

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\0411dd.com -> 0411dd.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\0511zfhl.com -> 0511zfhl.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\05p.com -> 05p.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\0632qyw.com -> 0632qyw.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\0calories.net -> 0calories.net

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\0cj.net -> 0cj.net

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\0scan.com -> 0scan.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\1-britney-spears-nude.com -> 1-britney-spears-nude.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\1-domains-registrations.com -> 1-domains-registrations.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\1-se.com -> 1-se.com

IE restricted site: HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\…\1001movie.com -> 1001movie.com

There are 6091 more sites.

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 19:04 - 2018-08-07 20:16 - 000000855 _____ C:\Windows\system32\drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\Common Files\Acronis\SnapAPI\;C:\Program Files\RogueKiller;

HKU\S-1-5-21-2863067232-3147982578-4033237767-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Kelly\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.43.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{22659305-C4E5-4A49-9916-B651A65B36E5}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)

FirewallRules: [{FC6FC25D-100A-4646-9DD6-5B6AE03C8BDA}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe (Hewlett Packard -> Hewlett-Packard Co.)

FirewallRules: [{4E0722CC-B7F4-47E1-A0AE-FBA21A5B5CB3}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe No File

FirewallRules: [{FF3BCC58-5738-406F-84DB-D8759D6F3D00}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe No File

FirewallRules: [{A5EB7281-EB00-4D62-B698-F649B0B2F9CA}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe (Hewlett Packard -> Hewlett-Packard Co.)

FirewallRules: [{A8F5416D-DEB3-40F6-B23A-228206C2B709}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe No File

FirewallRules: [{B46728D0-1944-4C9E-964B-0039AA484502}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe No File

FirewallRules: [{243F8B93-861A-4CFC-AF20-1CE54E3AABDD}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe No File

FirewallRules: [{92CE31E2-C870-45D7-B440-AAA74699FB72}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe (Hewlett Packard -> Hewlett-Packard Co.)

FirewallRules: [{C732706B-74B0-4411-B6E1-02C42F30ACBE}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe (Hewlett Packard -> Hewlett-Packard)

FirewallRules: [{F638767A-C54E-41D8-9D2D-90B69B3EA31F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe (Hewlett Packard -> Hewlett-Packard Co.)

FirewallRules: [{886ACE18-3E84-4616-BCA3-58F263976D14}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe (Hewlett Packard -> Hewlett-Packard Co.)

FirewallRules: [{AE254109-DBF0-4BE5-AEE5-FC728B6FDEB6}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe (Hewlett-Packard Company -> Hewlett-Packard)

FirewallRules: [{C06D584F-32D3-4586-87E7-C1128DCA0F9F}] => (Allow) C:\Program Files\HP\digital imaging\smart web printing\smartwebprintexe.exe (Hewlett-Packard Company -> Hewlett-Packard Co.)

FirewallRules: [{4CD2794D-B4C3-4094-BD7A-9B0877A40718}] => (Allow) C:\Program Files\IncrediMail\Bin\IncMail.exe No File

FirewallRules: [{A6F14044-70ED-4E40-B579-378F07A3EBB1}] => (Allow) C:\Program Files\IncrediMail\Bin\IncMail.exe No File

FirewallRules: [{951AFA79-AE85-4878-A3D6-20EAE6A148AB}] => (Allow) C:\Program Files\IncrediMail\Bin\ImApp.exe No File

FirewallRules: [{3C89F4A6-F5CD-4378-ADAA-E5CB6396D2F6}] => (Allow) C:\Program Files\IncrediMail\Bin\ImApp.exe No File

FirewallRules: [{4C7252F2-6B36-4CCB-BF93-0B99A017D996}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe No File

FirewallRules: [{9AE336E2-4331-4F7D-B25B-1B9E23FE1C7C}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe No File

FirewallRules: [{7C74D263-024A-4B4D-B5A3-3AA84C3321C1}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{8123B6AA-374E-4290-86E6-E8A8B966F060}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer.exe No File

FirewallRules: [{DB232870-003A-4DAA-9BC5-2AFAECB933C5}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer.exe No File

FirewallRules: [{8344B42B-0FDE-45B1-9101-F047D287247B}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe No File

FirewallRules: [{82023296-E2B6-4B45-BB03-DADCB278812A}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe No File

FirewallRules: [{65B15C61-76F8-4146-B377-5FC5E1E6599F}] => (Allow) C:\Program Files\HP\HP DeskJet 2130 series\Bin\USBSetup.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)

FirewallRules: [{1329971C-8115-4179-88AA-663C3A3C1B5F}] => (Allow) C:\Program Files\HP\HP DeskJet 2130 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)

FirewallRules: [{E0F12348-1C51-4A33-9532-07E4CEB7047B}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)

FirewallRules: [{C3E5F457-4C34-4827-A132-338F9E86E6AC}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)

FirewallRules: [{89273056-1FB2-462A-94D3-F01426CD3D0F}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)

FirewallRules: [{C4E48EC2-9A8F-4633-BE4F-1D12C45BF3BB}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)

FirewallRules: [{AD9068D5-E587-4825-A3A1-A5306BEBF8C9}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)

FirewallRules: [{4D575B87-341E-48E4-8D2D-8E01F08A41EA}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)

FirewallRules: [{AD40DC6F-D953-463B-8669-E2A1C42A455C}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)

FirewallRules: [{CF738B92-AD08-4DB8-85D2-CE7EC8DD00A1}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)

FirewallRules: [{AAA584A9-6EB6-4D07-84BA-B5269FBCAB67}] => (Allow) C:\PROGRA~1\REALTEK\USBWIR~1\RtWlan.exe (Realtek Semiconductor Corp.) [File not signed]

FirewallRules: [{19EE029B-8525-4D92-A056-9CFE8AC5AEAE}] => (Allow) LPort=1542

FirewallRules: [{3F08B4D5-0D70-4091-9E43-B2430D7385C5}] => (Allow) LPort=1542

FirewallRules: [{33905E74-6D44-4245-83CE-3C749A3B99EB}] => (Allow) LPort=53

FirewallRules: [{5D820765-274F-40F7-9A45-23E3B902774D}] => (Allow) C:\PROGRA~1\REALTEK\USBWIR~1\Rtldhcp.exe (Realtek Semiconductor Corp -> Realtek)

FirewallRules: [{62576861-CE0E-41A0-809D-BE06F92D9ED1}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)

FirewallRules: [{5BB5594B-CB6C-4D92-9A5E-60AA4570C440}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)

FirewallRules: [{C12FF814-B8F0-40C6-BA13-0524588ABFC7}] => (Allow) LPort=53

FirewallRules: [{554E8176-8F80-48A0-9509-D32E6AAB7E0A}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)

FirewallRules: [{EEA17A97-54AB-43CB-A981-03564044C4AD}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)

FirewallRules: [{01AE66D5-72F8-445A-93BC-6C5604497FC1}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)

FirewallRules: [{B10BE374-7E6C-4D57-9CB4-C1BAD0883BAF}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)

FirewallRules: [{8930E1DF-830D-486D-A8EC-395EEF3E79E8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{E74BA614-FDAE-4BC6-8599-772D7B885F05}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [TCP Query User{4FAD9B84-9A2E-4B36-B749-AB8177DE961B}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [UDP Query User{ABFF0D23-1CC6-48BB-84C8-2C6DC129E54B}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{C3C12F85-6C76-4F49-AE98-F92DAAEDD9C0}] => (Allow) C:\Program Files\Pale Moon\palemoon.exe (Moonchild Productions) [File not signed]

FirewallRules: [{22CD7F88-5C8D-4AAC-A998-1D42F021B44F}] => (Allow) C:\Program Files\Pale Moon\palemoon.exe (Moonchild Productions) [File not signed]

FirewallRules: [{2CFCA934-09F3-4C75-92A7-E8A309270D68}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)

==================== Restore Points =========================

12-03-2019 00:00:02 Scheduled Checkpoint

19-03-2019 19:35:07 Scheduled Checkpoint

==================== Faulty Device Manager Devices =============

Name: PS/2 Compatible Mouse

Description: PS/2 Compatible Mouse

Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Standard PS/2 Keyboard

Description: Standard PS/2 Keyboard

Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standard keyboards)

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

==================== Event log errors: =========================

Application errors:

==================

Error: (03/25/2019 12:06:08 PM) (Source: ESENT) (EventID: 454) (User: )