monetary
Topic Starter
Hi,
I ran the following scans and cleaned up all the adware, spyware etc on two different computer (at the same location) and within a couple of weeks both of them were reinfected. I have again ran the following scans and cleaned up all the adware, spyware etc. however I downloaded and installed the RougeKiller the second time.
Please advise!
1st scans
rKill - No Detections
CCleaner - No Detections
MalwareBytes - 326 Detections
TDSS Killer - No Detections
JunkRemoval Tools - 2 Detections
AdwareCleaner - 26 Detections - Report Below
2nd scans two weeks later
rKill - No Detections
CCleaner - No Detections
MalwareBytes - 326 Detections
TDSS Killer - No Detections
JunkRemoval Tools - 2 Detections
AdwareCleaner - 2 Detections
Per your website I ran the aswMBR and the Farbar Recovery Scan. Below are the log results
aswMBR
aswMBR version 1.0.1.2252 Copyright© 2014 AVAST Software
Run date: 2019-07-16 21:42:43
—————————–
21:42:43.433 OS Version: Windows x64 6.1.7601 Service Pack 1
21:42:43.433 Number of processors: 8 586 0x5E03
21:42:43.433 ComputerName: GINACRUSCO-PC UserName: Gina Crusco
21:42:44.718 Initialize success
21:42:44.829 VM: initialized successfully
21:42:44.829 VM: Intel CPU supported
21:42:55.585 VM: disk I/O iaStorA.sys
21:43:30.440 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000077
21:43:30.445 Disk 0 Vendor: WD_____ 01.0 Size: 953869MB BusType: 11
21:43:30.450 Disk 1 \Device\Harddisk1\DR1 -> \Device\00000079
21:43:30.450 Disk 1 Vendor: WD_____ 51.0 Size: 953869MB BusType: 11
21:43:30.555 Disk 0 MBR read successfully
21:43:30.555 Disk 0 MBR scan
21:43:30.560 Disk 0 unknown MBR code
21:43:30.570 Disk 0 Partition 1 00 EE GPT 2097151 MB offset 1
21:43:30.590 Disk 0 scanning C:\Windows\system32\drivers
21:43:35.625 Service scanning
21:43:36.815 Service avdevprot C:\Windows\system32\DRIVERS\avdevprot.sys **LOCKED** 5
21:43:36.880 Service avipbb C:\Windows\system32\DRIVERS\avipbb.sys **LOCKED** 5
21:43:36.975 Service avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys **LOCKED** 5
21:43:37.000 Service avnetflt C:\Windows\system32\DRIVERS\avnetflt.sys **LOCKED** 5
21:43:37.030 Service avusbflt C:\Windows\System32\Drivers\avusbflt.sys **LOCKED** 5
21:43:45.956 Modules scanning
21:43:45.971 Disk 0 trace - called modules:
21:43:45.986
21:43:45.996 Disk 0 statistics 96332/0/0 @ 9.66 MB/s
21:43:46.006 Scan finished successfully
21:44:04.169 Disk 0 MBR has been saved successfully to "C:\Users\Gina Crusco\Documents\zMicroVital?ize.Com\1Scans\1WhatTheTech.com\1st - Run but Please Do Not Fix Anything - Just need the report\MBR.dat"
21:44:04.174 The log file has been saved successfully to "C:\Users\Gina Crusco\Documents\zMicroVital?ize.Com\1Scans\1WhatTheTech.com\1st - Run but Please Do Not Fix Anything - Just need the report\aswMBR Log.txt"
Farbar Recovery Scan
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-07-2019 01
Ran by [removed] (administrator) on GINACRUSCO-PC (16-07-2019 21:47:15)
Running from C:\Users\[removed]\Documents\zMicroVitalize.Com\1Scans\1WhatTheTech.com\2nd Farbar Recovery Scan - save to desktop\64Bit
[removed]
Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Inc. -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(AVAST Software) [File not signed] C:\Users\Gina Crusco\Documents\zMicroVitalize.Com\1Scans\1WhatTheTech.com\1st - Run but Please Do Not Fix Anything - Just need the report\aswMBR.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe
(Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler64.exe
(Hewlett-Packard -> HP Development Company, L.P.) C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe
(HP Inc -> HP Inc.) C:\Program Files\HP\HP OfficeJet Pro 8740\Bin\HPNetworkCommunicatorCom.exe
(HP Inc -> HP Inc.) C:\Program Files\HP\HP OfficeJet Pro 8740\Bin\ScanToPCActivationApp.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe
(Intuit Inc.) [File not signed] C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
(Intuit, Inc. -> ) C:\Program Files (x86)\Common Files\Intuit\DataProtect\IBuEngHost.exe
(Intuit, Inc. -> Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\DataProtect\IntuitDataProtect.exe
(Intuit, Inc. -> Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
(Intuit, Inc. -> Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Node.js Foundation -> Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(PC DRIVERS HEADQUARTERS I, INC -> PC Drivers HeadQuarters LP) C:\Program Files (x86)\Driver Support\svc\DriverSupportAOsvc.exe
(TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Desktop.exe
(TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\…\Run: [] => [X]
HKLM\…\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\…\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302904 2019-05-07] (Apple Inc. -> Apple Inc.)
HKLM-x32\…\Run: [] => [X]
HKLM-x32\…\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [98024 2019-05-14] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
HKLM-x32\…\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2976256 2018-01-19] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\…\Run: [BrotherSoftwareUpdateNotification] => C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe [3581952 2017-04-05] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\…\Run: [StatusAlerts] => C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe [331344 2015-07-22] (Hewlett-Packard -> HP Development Company, L.P.)
HKLM-x32\…\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2622520 2019-05-19] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\…\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [4992048 2019-05-02] (Adobe Inc. -> Adobe Systems Inc.)
HKU\S-1-5-21-221233175-754072661-1512419714-1000\…\Run: [HP OfficeJet Pro 8740 (NET)] => C:\Program Files\HP\HP OfficeJet Pro 8740\Bin\ScanToPCActivationApp.exe [3734944 2018-12-05] (HP Inc -> HP Inc.)
HKU\S-1-5-21-221233175-754072661-1512419714-1000\…\Run: [] => [X]
HKU\S-1-5-21-221233175-754072661-1512419714-1000\…\MountPoints2: {7aa8f9c6-c169-11e6-a0b2-806e6f6e6963} - D:\.\Setup.exe
HKU\S-1-5-21-221233175-754072661-1512419714-1000\…\Winlogon: [Shell] C:\Windows\explorer.exe [3229696 2016-08-29] (Microsoft Windows -> Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-221233175-754072661-1512419714-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-13] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\75.0.3770.142\Installer\chrmstp.exe [2019-07-16] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D00AE86-E9F9-43A0-82A4-79EBA59183E2}] -> "C:\Program Files (x86)\Avira\Scout\Application\59.0.3071.2851\Installer\chrmstp.exe" –configure-user-settings –verbose-logging –system-level
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.40\Installer\chrmstp.exe" –configure-user-settings –verbose-logging –system-level –multi-install –chrome
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Intuit Data Protect.lnk [2019-03-30]
ShortcutTarget: Intuit Data Protect.lnk -> C:\Program Files (x86)\Common Files\Intuit\DataProtect\IntuitDataProtect.exe (Intuit, Inc. -> Intuit Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk [2019-03-30]
ShortcutTarget: QuickBooks Update Agent.lnk -> C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit, Inc. -> Intuit Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks_Standard_21.lnk [2019-03-30]
ShortcutTarget: QuickBooks_Standard_21.lnk -> C:\Program Files (x86)\Intuit\QuickBooks 2019\QBW32.EXE (Intuit, Inc. -> Intuit Inc.)
Startup: C:\Users\Gina Crusco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2019-06-19]
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {068D3B24-0433-4933-A5DC-2D95C0482149} - System32\Tasks\AdobeGCInvoker-1.0-GinaCrusco-PC-Gina Crusco => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2849872 2019-07-04] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {07FCAA09-292E-4AA4-8E81-438D9321BFDF} - System32\Tasks\Avira\System Speedup\TestScheduler => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe
Task: {0E7A6D79-0C51-4681-AF7F-FDC6F16523C6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-07-31] (Google Inc -> Google Inc.)
Task: {13EA2D43-CB67-4D97-AEFB-8E0DD0E7B88C} - System32\Tasks\Driver Support-RTMRules => C:\Program Files (x86)\Driver Support\DriverSupport.exe <==== ATTENTION
Task: {1F9F8EB9-C831-4EF2-8A60-0E7A69D188E4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {2033F888-5EB5-4644-BF64-D851F8A5C096} - \PowerENGAGE -> No File <==== ATTENTION
Task: {226A6E14-203A-4C32-BC2D-48EEE502DC87} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506680 2019-06-14] (HP Inc. -> HP Inc.)
Task: {2B8797EA-6437-4DE5-906B-BE4505E8A5A8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_CN57SFK3FS => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1073528 2019-04-02] (HP Inc. -> HP Inc.)
Task: {33774052-0F3A-46D8-AB7F-CA1604B27578} - System32\Tasks\QBScheduledReport => C:\Program Files (x86)\Common Files\Intuit\QuickBooks\ScheduledReports\ScheduledReports.Scheduler.exe [389168 2019-06-07] (Intuit, Inc. -> Intuit Inc.)
Task: {3F84602E-427B-40C0-90B8-B23F02EFC4FC} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2884456 2019-07-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {45F147B1-44E0-42BE-8703-6720956053DE} - System32\Tasks\AviraScoutUpdateTaskMachineCore => C:\Program Files (x86)\Avira\Scout Update\ScoutUpdate.exe
Task: {495E1310-D978-4B75-8881-60F8565D45AB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [654712 2019-06-05] (HP Inc. -> HP Inc.)
Task: {52349923-BDF1-42F1-9340-E1A096E906BF} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [781248 2016-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {52DF6BDB-A50A-49A1-9240-4B8A216BF155} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [705984 2016-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5498191F-F66C-46A5-B9BE-6510AB672291} - System32\Tasks\Driver Support-RTMUpdater => C:\Program Files (x86)\Driver Support\DriverSupport.exe <==== ATTENTION
Task: {61ED4CD3-31E4-41B9-832F-3DF1CE430B2B} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [629696 2016-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6932F21F-7E4D-4EE1-8621-75A12362A8EF} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26804232 2019-06-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {6D5768DA-4A1D-4C80-A3EF-FB64DE27C310} - System32\Tasks\AviraSystemSpeedupUpdate => C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe
Task: {77CD04A8-0B6B-4B68-A852-33CE7FDE6532} - \PowerEngageUninstall -> No File <==== ATTENTION
Task: {7C4D0E68-4897-4EF5-BBE8-71B64CBE4F35} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [113616 2019-07-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {85A0934A-C9ED-4167-B78C-C5AC9B497469} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [654712 2019-06-05] (HP Inc. -> HP Inc.)
Task: {8A9CB676-9CDC-49F0-931E-E5EA8B31E173} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_CN75RF621B => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1073528 2019-04-02] (HP Inc. -> HP Inc.)
Task: {8C333FCF-247E-4199-9D2B-76CC7237BF71} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [705984 2016-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {91222B82-E7DE-420F-B31F-8E3B4F6247E4} - System32\Tasks\HPLJCustParticipation => C:\Program Files (x86)\HP\HPLJUT\HPLJUTSCH.exe [91400 2015-12-05] (Hewlett-Packard -> HP Development Company, L.P.)
Task: {9341215A-815A-4BDB-85FB-D04F311C0962} - System32\Tasks\AviraScoutUpdateTaskMachineUA => C:\Program Files (x86)\Avira\Scout Update\ScoutUpdate.exe
Task: {942A4B6C-2B6D-4997-B279-6F5EAF68676C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-07-31] (Google Inc -> Google Inc.)
Task: {9F42EFA8-9361-4A1A-A17B-219BF102A2CE} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1448512 2019-07-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {AD348BC3-20C2-4791-B54E-6405EAEB4598} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1448512 2019-07-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {AE3D938A-6039-4310-85B1-373733A4C64D} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [25128 2017-11-18] (HP Inc. -> )
Task: {B27DECF6-F11A-4534-A23D-4741A4B4DFF9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [237432 2019-04-29] (HP Inc. -> HP Inc.)
Task: {BAE3BA61-8B19-4D1C-BD26-AD04C0DFDD0D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506680 2019-06-14] (HP Inc. -> HP Inc.)
Task: {C8DF71C4-BDE8-4815-95A9-2F0378F0CAD5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1073528 2019-04-02] (HP Inc. -> HP Inc.)
Task: {C999C947-6A64-4EDA-9695-E172E637F860} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [629696 2016-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D10D75A1-C48C-433E-A941-399447452613} - System32\Tasks\Driver Support-RTMScan => C:\Program Files (x86)\Driver Support\DriverSupport.exe <==== ATTENTION
Task: {D4B22361-D69E-4D50-AE8D-2524C76005D7} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [113616 2019-07-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {D6C807D4-21AA-4C2D-B413-2A899DDC7972} - System32\Tasks\HPCeeScheduleForGina Crusco => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [99392 2016-05-12] (Hewlett-Packard Company -> HP Development Company, L.P.)
Task: {DE915F02-B352-4D16-B618-664C8CB1AAC7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136056 2019-01-02] (HP Inc. -> HP Inc.)
Task: {E26E0A5A-A7EB-4D2A-B40A-F4C09F491636} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E33BB740-9B36-4E83-A939-957642BF429C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26804232 2019-06-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {F1B3764F-32D5-41A3-B729-C49F6FACF79E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616320 2018-01-08] (Apple Inc. -> Apple Inc.)
Task: {F3C5D9E2-7C29-4DC6-80F3-BDDB23BB95F8} - System32\Tasks\Driver Support => C:\Program Files (x86)\Driver Support\DriverSupport.exe <==== ATTENTION
Task: {FD1EACBB-EC6E-4A90-852B-4DEFF4253631} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436160 2016-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\AdwCleaner_onReboot.job => C:\Users\Gina Crusco\Documents\zMicroVitalize.Com\1Scans\AdwCleaner\AdwCleaner.exe
Task: C:\Windows\Tasks\HPCeeScheduleForGina Crusco.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip\..\Interfaces\{5124942F-D71E-44A7-9BD3-57B0A854DF95}: [DhcpNameServer] 75.75.75.75 75.75.76.76
Internet Explorer:
==================
HKU\S-1-5-21-221233175-754072661-1512419714-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?gws_rd=ssl
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-07-01] (Microsoft Corporation -> Microsoft Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2019-05-02] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-25] (Logitech Inc -> Logitech, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2019-07-01] (Microsoft Corporation -> Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2019-05-02] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2019-05-02] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-08-25] (Logitech Inc -> Logitech, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2019-07-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2019-05-02] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2019-05-02] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - No Name - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - No File
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2019-05-02] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-221233175-754072661-1512419714-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2019-05-02] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Handler-x32: intu-help-qb10 - {E795042F-8A29-42E4-B265-2C7AB38E8AEE} - C:\Program Files (x86)\Intuit\QuickBooks 2017\HelpAsyncPluggableProtocol.dll [2018-02-11] (Intuit, Inc. -> Intuit, Inc.)
Handler-x32: intu-help-qb11 - {5AFDE6E8-AD0F-450B-818F-21D1CDC2E3EE} - C:\Program Files (x86)\Intuit\QuickBooks 2018\HelpAsyncPluggableProtocol.dll [2019-05-29] (Intuit, Inc. -> Intuit, Inc.)
Handler-x32: intu-help-qb12 - {665F2BD4-8216-400B-9706-865D2B771E27} - C:\Program Files (x86)\Intuit\QuickBooks 2019\HelpAsyncPluggableProtocol.dll [2019-06-07] (Intuit, Inc. -> Intuit, Inc.)
Handler-x32: intu-help-qb7 - {5A03BD9D-766D-47A6-8E87-CD90F60BE245} - C:\Program Files (x86)\Intuit\QuickBooks 2014\HelpAsyncPluggableProtocol.dll [2017-03-01] (Intuit, Inc. -> Intuit, Inc.)
Handler-x32: intu-help-qb9 - {C1252096-0E63-4C06-A38B-03DF9A16AA12} - C:\Program Files (x86)\Intuit\QuickBooks 2016\HelpAsyncPluggableProtocol.dll [2017-05-16] (Intuit, Inc. -> Intuit, Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-07-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-07-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-07-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-07-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - C:\Windows\SysWOW64\mscoree.dll [2010-11-20] (Microsoft Corporation -> Microsoft Corporation)
FireFox:
========
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2019-05-02]
FF HKLM-x32\…\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2016-12-15] [Legacy] [not signed]
FF HKLM-x32\…\Firefox\Extensions: [[removed]] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2019-05-19] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-04-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-03-23] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-03-23] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-14] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-14] (Google Inc -> Google LLC)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2019-05-02] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-05-02] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2019-05-19] (Adobe Inc. -> Adobe Systems)
FF Plugin HKU\S-1-5-21-221233175-754072661-1512419714-1000: @citrixonline.com/appdetectorplugin -> C:\Users\Gina Crusco\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2016-12-15] (Citrix Online -> Citrix Online)
Chrome:
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchURL: Default -> hxxp://srchbar.com/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> pds
CHR DefaultSuggestURL: Default -> hxxp://srchbar.com/?s={searchTerms}
CHR Profile: C:\Users\Gina Crusco\AppData\Local\Google\Chrome\User Data\Default [2019-07-16]
CHR Extension: (Adobe Acrobat) - C:\Users\Gina Crusco\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-06-27]
CHR Extension: (Dashlane - Password Manager) - C:\Users\Gina Crusco\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdjamakpfbbddfjaooikfcpapjohcfmg [2019-07-11]
CHR Extension: (DoctoPDF) - C:\Users\Gina Crusco\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfgkpeobcmjlocjpfgocelimhppdmigj [2019-07-16]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Gina Crusco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
CHR Extension: (Chrome Media Router) - C:\Users\Gina Crusco\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-06-24]
CHR HKLM\…\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\…\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\…\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [816184 2019-05-19] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3117648 2019-07-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2888272 2019-07-04] (Adobe Inc. -> Adobe Systems, Incorporated)
S4 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1215768 2019-07-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [486960 2019-07-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [486960 2019-07-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1777912 2019-07-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2019-04-29] (Apple Inc. -> Apple Inc.)
S4 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2015-05-08] (ASUSTeK Computer Inc. -> )
S4 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-24] (ASUSTeK Computer Inc. -> ) [File not signed]
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [455424 2019-05-14] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [314368 2018-01-18] (Brother Industries, Ltd.) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11413600 2019-06-26] (Microsoft Corporation -> Microsoft Corporation)
R2 DSAO; C:\Program Files (x86)\driver support\svc\DriverSupportAOsvc.exe [2033104 2016-10-22] (PC DRIVERS HEADQUARTERS I, INC -> PC Drivers HeadQuarters LP) <==== ATTENTION
S4 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [176128 2014-06-25] (HP) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [356728 2019-06-12] (HP Inc. -> HP Inc.)
R2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-22] (HP Inc. -> HP Inc.)
S4 IDriveE Service; C:\IDrive\IDriveE Service.exe [158264 2013-05-20] (Pro Softnet Corp -> Pro Softnet Corporation)
S4 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel® Trusted Connect Service -> Intel(R) Corporation)
S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-08-14] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2012-07-31] (Hewlett-Packard) [File not signed]
S4 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [66048 2012-07-31] (Hewlett-Packard) [File not signed]
R3 QBFCService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe [65536 2016-10-13] (Intuit Inc.) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7500048 2016-09-20] (TeamViewer -> TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
S4 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
S4 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
S4 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "%ProgramData%\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-09-08] (ASUSTeK Computer Inc. -> )
R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [68152 2019-06-12] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [214424 2019-06-12] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [176808 2019-06-12] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [36072 2019-02-27] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [78600 2017-03-21] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [35376 2019-02-27] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink -> CyberLink)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [537080 2017-07-19] (Intel(R) INTELND1617 -> Intel Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [31144 2015-06-21] (Intel Corporation - Rapid Storage Technology -> Intel Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [178976 2015-07-28] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46016 2016-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
U3 TrueSight; C:\Windows\System32\drivers\truesight.sys [28272 2019-07-16] (Adlice -> )
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2017-11-27] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
U3 aswMBR; \??\C:\Users\GINACR~1\AppData\Local\Temp\aswMBR.sys [X] <==== ATTENTION
U3 aswVmm; \??\C:\Users\GINACR~1\AppData\Local\Temp\aswVmm.sys [X] <==== ATTENTION
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-07-16 21:44 - 2019-07-16 21:44 - 000000000 ____D C:\FRST
2019-07-16 16:28 - 2019-07-16 16:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2019-07-16 15:54 - 2019-07-16 16:10 - 000028272 _____ C:\Windows\system32\Drivers\truesight.sys
2019-07-16 15:53 - 2019-07-16 15:53 - 000000899 _____ C:\Users\Gina Crusco\Desktop\tdsskiller.exe - Shortcut.lnk
2019-07-16 15:50 - 2019-07-16 15:53 - 000430144 _____ C:\TDSSKiller.3.1.0.28_16.07.2019_15.50.03_log.txt
2019-07-13 15:21 - 2019-07-13 15:21 - 001632500 _____ C:\Users\Gina Crusco\Downloads\Crusco_Client_Report_2019_06_03_19_29_05.pdf
2019-07-11 17:08 - 2019-07-11 17:08 - 001026634 _____ C:\Users\Gina Crusco\Downloads\fw2c.pdf
2019-07-09 22:55 - 2019-06-28 01:24 - 000887808 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2019-07-09 22:55 - 2019-06-28 01:24 - 000448512 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2019-07-09 22:55 - 2019-06-28 01:24 - 000414208 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2019-07-09 22:55 - 2019-06-28 01:24 - 000118784 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2019-07-09 22:55 - 2019-06-28 01:24 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2019-07-09 22:55 - 2019-06-28 01:23 - 000428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2019-07-09 22:55 - 2019-06-28 01:23 - 000392704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll
2019-07-09 22:55 - 2019-06-28 01:23 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2019-07-09 22:55 - 2019-06-28 01:23 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2019-07-09 22:55 - 2019-06-20 23:09 - 000806400 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2019-07-09 22:55 - 2019-06-20 23:05 - 000628224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2019-07-09 22:55 - 2019-06-20 22:44 - 003229696 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2019-07-09 22:55 - 2019-06-20 21:41 - 001251840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2019-07-09 22:55 - 2019-06-20 05:11 - 000396896 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2019-07-09 22:55 - 2019-06-20 04:15 - 000348976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2019-07-09 22:55 - 2019-06-18 23:06 - 006135296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2019-07-09 22:55 - 2019-06-18 21:52 - 007081984 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2019-07-09 22:55 - 2019-06-18 02:41 - 001649664 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2019-07-09 22:55 - 2019-06-18 00:34 - 025730560 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-07-09 22:55 - 2019-06-18 00:21 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2019-07-09 22:55 - 2019-06-18 00:21 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2019-07-09 22:55 - 2019-06-18 00:09 - 002903552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2019-07-09 22:55 - 2019-06-18 00:08 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2019-07-09 22:55 - 2019-06-18 00:07 - 000578560 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-07-09 22:55 - 2019-06-18 00:07 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2019-07-09 22:55 - 2019-06-18 00:07 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2019-07-09 22:55 - 2019-06-18 00:07 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2019-07-09 22:55 - 2019-06-18 00:00 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2019-07-09 22:55 - 2019-06-17 23:59 - 005775872 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2019-07-09 22:55 - 2019-06-17 23:59 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2019-07-09 22:55 - 2019-06-17 23:57 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2019-07-09 22:55 - 2019-06-17 23:56 - 020274688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-07-09 22:55 - 2019-06-17 23:56 - 000790528 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2019-07-09 22:55 - 2019-06-17 23:56 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2019-07-09 22:55 - 2019-06-17 23:56 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2019-07-09 22:55 - 2019-06-17 23:55 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2019-07-09 22:55 - 2019-06-17 23:51 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2019-07-09 22:55 - 2019-06-17 23:48 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2019-07-09 22:55 - 2019-06-17 23:45 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2019-07-09 22:55 - 2019-06-17 23:39 - 000496128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-07-09 22:55 - 2019-06-17 23:39 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2019-07-09 22:55 - 2019-06-17 23:39 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2019-07-09 22:55 - 2019-06-17 23:38 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2019-07-09 22:55 - 2019-06-17 23:38 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2019-07-09 22:55 - 2019-06-17 23:38 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2019-07-09 22:55 - 2019-06-17 23:38 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2019-07-09 22:55 - 2019-06-17 23:37 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2019-07-09 22:55 - 2019-06-17 23:35 - 002297344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2019-07-09 22:55 - 2019-06-17 23:35 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2019-07-09 22:55 - 2019-06-17 23:34 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2019-07-09 22:55 - 2019-06-17 23:32 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2019-07-09 22:55 - 2019-06-17 23:32 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2019-07-09 22:55 - 2019-06-17 23:32 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2019-07-09 22:55 - 2019-06-17 23:30 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2019-07-09 22:55 - 2019-06-17 23:30 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2019-07-09 22:55 - 2019-06-17 23:29 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2019-07-09 22:55 - 2019-06-17 23:29 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2019-07-09 22:55 - 2019-06-17 23:29 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2019-07-09 22:55 - 2019-06-17 23:21 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2019-07-09 22:55 - 2019-06-17 23:21 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2019-07-09 22:55 - 2019-06-17 23:20 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2019-07-09 22:55 - 2019-06-17 23:20 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2019-07-09 22:55 - 2019-06-17 23:19 - 015311872 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2019-07-09 22:55 - 2019-06-17 23:17 - 002136064 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2019-07-09 22:55 - 2019-06-17 23:17 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2019-07-09 22:55 - 2019-06-17 23:16 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2019-07-09 22:55 - 2019-06-17 23:16 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2019-07-09 22:55 - 2019-06-17 23:16 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2019-07-09 22:55 - 2019-06-17 23:13 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2019-07-09 22:55 - 2019-06-17 23:13 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2019-07-09 22:55 - 2019-06-17 23:11 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2019-07-09 22:55 - 2019-06-17 23:10 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2019-07-09 22:55 - 2019-06-17 23:07 - 004494336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2019-07-09 22:55 - 2019-06-17 23:06 - 004858880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2019-07-09 22:55 - 2019-06-17 23:04 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2019-07-09 22:55 - 2019-06-17 23:03 - 013706752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2019-07-09 22:55 - 2019-06-17 23:03 - 002060288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2019-07-09 22:55 - 2019-06-17 23:03 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2019-07-09 22:55 - 2019-06-17 23:02 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2019-07-09 22:55 - 2019-06-17 22:55 - 001557504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2019-07-09 22:55 - 2019-06-17 22:44 - 004386304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2019-07-09 22:55 - 2019-06-17 22:43 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2019-07-09 22:55 - 2019-06-17 22:41 - 001323008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2019-07-09 22:55 - 2019-06-17 22:39 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2019-07-09 22:55 - 2019-06-12 23:25 - 000160488 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2019-07-09 22:55 - 2019-06-12 23:21 - 000732160 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2019-07-09 22:55 - 2019-06-12 11:23 - 004057320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2019-07-09 22:55 - 2019-06-12 11:23 - 003964136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2019-07-09 22:55 - 2019-06-12 11:22 - 001314104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2019-07-09 22:55 - 2019-06-12 11:21 - 012574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2019-07-09 22:55 - 2019-06-12 11:21 - 011411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2019-07-09 22:55 - 2019-06-12 11:21 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2019-07-09 22:55 - 2019-06-12 11:21 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2019-07-09 22:55 - 2019-06-12 11:21 - 000617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2019-07-09 22:55 - 2019-06-12 11:21 - 000275968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-07-09 22:55 - 2019-06-12 11:21 - 000179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2019-07-09 22:55 - 2019-06-12 11:21 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2019-07-09 22:55 - 2019-06-12 11:21 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2019-07-09 22:55 - 2019-06-12 11:21 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2019-07-09 22:55 - 2019-06-12 11:21 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 003207168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 001329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000261632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssign32.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2019-07-09 22:55 - 2019-06-12 11:20 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 001177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 001005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000373248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:15 - 000631680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2019-07-09 22:55 - 2019-06-12 11:11 - 000708328 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-07-09 22:55 - 2019-06-12 11:11 - 000262376 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2019-07-09 22:55 - 2019-06-12 11:11 - 000153832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2019-07-09 22:55 - 2019-06-12 11:11 - 000094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2019-07-09 22:55 - 2019-06-12 11:10 - 005550824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-07-09 22:55 - 2019-06-12 11:10 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2019-07-09 22:55 - 2019-06-12 11:09 - 001664352 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 014637568 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 012574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2019-07-09 22:55 - 2019-06-12 11:08 - 000782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 000236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2019-07-09 22:55 - 2019-06-12 11:08 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2019-07-09 22:55 - 2019-06-12 11:08 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 004120576 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 001574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 001484800 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 001472512 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 001211392 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 001202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 001162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 001068544 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000733184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000499712 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000433152 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000408576 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000317440 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000187904 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000081920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\mssign32.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2019-07-09 22:55 - 2019-06-12 11:07 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000438784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000295936 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2019-07-09 22:55 - 2019-06-12 11:06 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 11:05 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2019-07-09 22:55 - 2019-06-12 11:04 - 000023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2019-07-09 22:55 - 2019-06-12 11:01 - 000663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2019-07-09 22:55 - 2019-06-12 10:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
2019-07-09 22:55 - 2019-06-12 10:54 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2019-07-09 22:55 - 2019-06-12 10:50 - 000055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2019-07-09 22:55 - 2019-06-12 10:49 - 000205312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Dism.exe
2019-07-09 22:55 - 2019-06-12 10:49 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2019-07-09 22:55 - 2019-06-12 10:49 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2019-07-09 22:55 - 2019-06-12 10:48 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2019-07-09 22:55 - 2019-06-12 10:48 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2019-07-09 22:55 - 2019-06-12 10:48 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2019-07-09 22:55 - 2019-06-12 10:48 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2019-07-09 22:55 - 2019-06-12 10:47 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2019-07-09 22:55 - 2019-06-12 10:46 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 10:46 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 10:46 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 10:46 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2019-07-09 22:55 - 2019-06-12 10:42 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2019-07-09 22:55 - 2019-06-12 10:42 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2019-07-09 22:55 - 2019-06-12 10:42 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2019-07-09 22:55 - 2019-06-12 10:42 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2019-07-09 22:55 - 2019-06-12 10:39 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2019-07-09 22:55 - 2019-06-12 10:39 - 000129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys
2019-07-09 22:55 - 2019-06-12 10:38 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2019-07-09 22:55 - 2019-06-12 10:37 - 000274944 _____ (Microsoft Corporation) C:\Windows\system32\Dism.exe
2019-07-09 22:55 - 2019-06-12 10:37 - 000011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2019-07-09 22:55 - 2019-06-12 10:37 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2019-07-09 22:55 - 2019-06-12 10:36 - 000464384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2019-07-09 22:55 - 2019-06-12 10:36 - 000406016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2019-07-09 22:55 - 2019-06-12 10:36 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2019-07-09 22:55 - 2019-06-12 10:36 - 000169472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2019-07-09 22:55 - 2019-06-12 10:36 - 000160768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2019-07-09 22:55 - 2019-06-12 10:36 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2019-07-09 22:55 - 2019-06-12 10:35 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2019-07-09 22:55 - 2019-06-12 10:35 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
2019-07-09 22:55 - 2019-06-12 10:35 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
2019-07-09 22:55 - 2019-06-12 10:35 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
2019-07-09 22:55 - 2019-06-12 10:35 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
2019-07-09 22:55 - 2019-06-12 10:35 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\npfs.sys
2019-07-09 22:55 - 2019-06-12 10:35 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2019-07-09 22:55 - 2019-06-10 22:59 - 002863104 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2019-07-09 22:55 - 2019-06-10 22:59 - 001712640 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2019-07-09 22:55 - 2019-06-10 22:59 - 000801792 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2019-07-09 22:55 - 2019-06-10 22:59 - 000634368 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2019-07-09 22:55 - 2019-06-10 22:59 - 000501760 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2019-07-09 22:55 - 2019-06-10 22:59 - 000456192 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2019-07-09 22:55 - 2019-06-10 22:59 - 000315904 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2019-07-09 22:55 - 2019-06-10 22:59 - 000257024 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2019-07-09 22:55 - 2019-06-07 11:18 - 001425920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2019-07-09 22:55 - 2019-06-07 11:18 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2019-07-09 22:55 - 2019-06-07 11:08 - 002072576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2019-07-09 22:55 - 2019-06-07 11:08 - 000516096 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2019-07-09 22:55 - 2019-06-07 11:08 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2019-07-09 22:55 - 2019-06-07 11:07 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2019-07-09 22:55 - 2019-06-07 10:55 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2019-07-09 22:55 - 2019-06-01 23:50 - 000216576 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2019-07-03 10:59 - 2019-07-03 10:59 - 000001006 _____ C:\Users\Public\Desktop\Stamps.com.lnk
2019-07-03 10:58 - 2019-07-03 10:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stamps.com
2019-07-03 10:58 - 2019-07-03 10:58 - 040554336 _____ (Stamps.com, Inc. ) C:\Users\Gina Crusco\Downloads\stamps (4).exe
2019-07-03 10:58 - 2019-07-03 10:58 - 000000000 ___HD C:\ProgramData\{B316D1AA-2C00-4B70-95D0-4EF510B38494}
2019-07-03 10:54 - 2019-07-03 10:54 - 004448944 _____ (TeamViewer) C:\Users\Gina Crusco\Downloads\remote (2).exe
2019-07-03 10:52 - 2019-07-03 10:52 - 004448944 _____ (TeamViewer) C:\Users\Gina Crusco\Downloads\remote (1).exe
2019-07-03 10:51 - 2019-07-03 10:51 - 004448944 _____ (TeamViewer) C:\Users\Gina Crusco\Downloads\remote.exe
2019-07-03 10:44 - 2019-07-03 10:44 - 040554336 _____ (Stamps.com, Inc. ) C:\Users\Gina Crusco\Downloads\stamps (3).exe
2019-07-03 10:40 - 2019-07-03 10:40 - 040554336 _____ (Stamps.com, Inc. ) C:\Users\Gina Crusco\Downloads\stamps (2).exe
2019-07-03 10:37 - 2019-07-03 10:37 - 040554336 _____ (Stamps.com, Inc. ) C:\Users\Gina Crusco\Downloads\stamps (1).exe
2019-07-03 10:29 - 2019-07-03 10:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2019-07-03 10:29 - 2019-07-03 10:29 - 000000000 ____D C:\Program Files\iPod
2019-07-03 10:28 - 2019-07-03 10:29 - 000000000 ____D C:\Program Files\iTunes
2019-06-27 17:17 - 2019-06-27 17:17 - 000123895 _____ C:\Users\Gina Crusco\Downloads\W3c.pdf
2019-06-27 16:15 - 2019-06-27 16:15 - 000003572 _____ C:\Windows\System32\Tasks\AdobeGCInvoker-1.0-GinaCrusco-PC-Gina Crusco
2019-06-27 16:13 - 2019-07-02 16:00 - 000002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2019-06-27 16:13 - 2019-06-27 16:15 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2019-06-27 16:13 - 2019-06-27 16:13 - 000002037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk
2019-06-27 16:08 - 2019-06-27 16:08 - 000000000 ___RD C:\Users\Gina Crusco\Creative Cloud Files
2019-06-27 15:43 - 2019-06-27 15:43 - 000000040 ____H C:\ED4A5F22CB38
2019-06-27 15:41 - 2019-06-27 15:41 - 000001329 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2019-06-27 15:41 - 2019-06-27 15:41 - 000001317 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2019-06-27 15:24 - 2019-06-27 15:24 - 001026634 _____ C:\Users\Gina Crusco\Downloads\2C form.pdf
2019-06-26 11:20 - 2019-06-26 11:20 - 000174121 _____ C:\Users\Gina Crusco\Downloads\receipt (8).pdf
2019-06-25 17:00 - 2019-06-25 17:00 - 000171957 _____ C:\Users\Gina Crusco\Downloads\receipt (7).pdf
2019-06-25 16:46 - 2019-06-25 16:46 - 000188380 _____ C:\Users\Gina Crusco\Downloads\receipt (6).pdf
2019-06-25 16:44 - 2019-06-25 16:44 - 000190015 _____ C:\Users\Gina Crusco\Downloads\receipt (5).pdf
2019-06-25 16:39 - 2019-06-25 16:39 - 000190751 _____ C:\Users\Gina Crusco\Downloads\receipt (4).pdf
2019-06-25 16:35 - 2019-06-25 16:35 - 000607046 _____ C:\Users\Gina Crusco\Downloads\invoice_3483.pdf
2019-06-25 16:34 - 2019-06-25 16:34 - 000191492 _____ C:\Users\Gina Crusco\Downloads\receipt (3).pdf
2019-06-25 16:31 - 2019-06-25 16:31 - 000190513 _____ C:\Users\Gina Crusco\Downloads\receipt (2).pdf
2019-06-25 16:31 - 2019-06-25 16:31 - 000190513 _____ C:\Users\Gina Crusco\Downloads\receipt (1).pdf
2019-06-25 16:29 - 2019-06-25 16:29 - 000190217 _____ C:\Users\Gina Crusco\Downloads\receipt.pdf
2019-06-25 11:01 - 2019-06-25 11:01 - 000002200 _____ C:\Users\Public\Desktop\HP OfficeJet Pro 8740.lnk
2019-06-25 11:01 - 2019-06-25 11:01 - 000001152 _____ C:\Users\Public\Desktop\Shop for Supplies - HP OfficeJet Pro 8740.lnk
2019-06-25 11:01 - 2018-12-05 08:27 - 000831904 ____N (HP Inc.) C:\Windows\system32\HPDiscoPM6312.dll
2019-06-25 10:55 - 2019-06-25 10:56 - 151501184 _____ C:\Users\Gina Crusco\Downloads\OJ8740_Full_WebPack_38.8.1942.exe
2019-06-25 10:54 - 2019-06-25 10:54 - 006752528 _____ C:\Users\Gina Crusco\Downloads\HPEasyStart_9_5_3891_33.exe
2019-06-24 09:00 - 2019-06-24 09:00 - 000376831 _____ C:\Users\Gina Crusco\Downloads\PatientRegistrationPacket9-5-18.pdf
2019-06-18 02:35 - 2019-06-18 02:35 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2019-06-18 02:35 - 2018-03-23 19:05 - 000138120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2019-06-18 02:35 - 2017-12-08 18:25 - 000798520 _____ C:\Windows\SysWOW64\vulkan-1.dll
2019-06-18 02:35 - 2017-12-08 18:25 - 000490808 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2019-06-18 02:35 - 2017-12-08 18:24 - 000928568 _____ C:\Windows\system32\vulkan-1.dll
2019-06-18 02:35 - 2017-12-08 18:24 - 000591672 _____ C:\Windows\system32\vulkaninfo.exe
2019-06-18 02:34 - 2019-06-18 02:34 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation
2019-06-18 02:20 - 2019-07-16 16:20 - 000000364 _____ C:\Windows\Tasks\AdwCleaner_onReboot.job
2019-06-18 02:17 - 2019-06-18 02:18 - 000216672 _____ C:\TDSSKiller.3.1.0.28_18.06.2019_02.17.45_log.txt
2019-06-17 22:12 - 2019-06-17 22:12 - 000000000 ____D C:\Users\Gina Crusco\AppData\Local\mbamtray
2019-06-17 22:12 - 2019-06-17 22:12 - 000000000 ____D C:\Users\Gina Crusco\AppData\Local\mbam
==================== One month (modified) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-07-16 20:35 - 2017-09-16 13:34 - 000003292 _____ C:\Windows\System32\Tasks\Avira_Antivirus_Systray
2019-07-16 20:20 - 2016-12-15 17:01 - 000000000 ____D C:\Users\Gina Crusco\Documents\games downloaded
2019-07-16 18:31 - 2016-12-13 01:42 - 000000000 ____D C:\Users\Gina Crusco\Documents\zMicroVitalize.Com
2019-07-16 16:47 - 2018-02-20 16:30 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-07-16 16:47 - 2018-02-20 16:30 - 000002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-07-16 16:47 - 2016-12-13 01:46 - 000000000 ____D C:\ProgramData\NVIDIA
2019-07-16 16:37 - 2009-07-14 00:45 - 000022096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2019-07-16 16:37 - 2009-07-14 00:45 - 000022096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2019-07-16 16:33 - 2018-11-23 12:45 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-07-16 16:32 - 2009-07-14 01:13 - 000789682 _____ C:\Windows\system32\PerfStringBackup.INI
2019-07-16 16:32 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\inf
2019-07-16 16:28 - 2018-11-23 12:46 - 000002416 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2019-07-16 16:28 - 2018-11-23 12:46 - 000002415 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2019-07-16 16:28 - 2018-11-23 12:46 - 000002378 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2019-07-16 16:28 - 2018-11-23 12:46 - 000002372 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2019-07-16 16:28 - 2018-11-23 12:46 - 000002358 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2019-07-16 16:27 - 2017-08-23 15:11 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2019-07-16 16:26 - 2017-01-08 16:55 - 000000356 _____ C:\Windows\Tasks\HPCeeScheduleForGina Crusco.job
2019-07-16 16:26 - 2009-07-14 01:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-07-16 15:49 - 2017-03-23 23:02 - 000000000 ____D C:\Program Files\Malwarebytes
2019-07-16 15:49 - 2017-03-23 12:04 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-07-16 13:14 - 2016-12-13 01:41 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2019-07-16 11:36 - 2017-01-02 19:04 - 000000000 ____D C:\Users\Gina Crusco\AppData\Local\CrashDumps
2019-07-16 11:36 - 2016-12-13 01:41 - 000000000 ____D C:\Users\Gina Crusco\AppData\Roaming\TeamViewer
2019-07-16 11:25 - 2016-12-15 17:03 - 000000000 ____D C:\Users\Gina Crusco\Documents\Outlook Files
2019-07-16 10:45 - 2017-01-03 18:29 - 000000036 ____H C:\Windows\SysWOW64\f9t.dat
2019-07-15 23:27 - 2017-07-31 18:16 - 000000000 ____D C:\Program Files\HP
2019-07-15 23:27 - 2016-12-15 17:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2019-07-13 18:35 - 2017-01-08 16:55 - 000003222 _____ C:\Windows\System32\Tasks\HPCeeScheduleForGina Crusco
2019-07-10 20:13 - 2017-08-24 18:28 - 000003196 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-221233175-754072661-1512419714-1000
2019-07-10 20:13 - 2017-08-23 15:18 - 000002179 _____ C:\Users\Gina Crusco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2019-07-10 20:13 - 2017-08-23 15:18 - 000000000 ___RD C:\Users\Gina Crusco\OneDrive
2019-07-10 12:30 - 2009-07-14 00:57 - 000001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2019-07-10 04:13 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\rescache
2019-07-10 03:25 - 2009-07-14 00:45 - 000465432 _____ C:\Windows\system32\FNTCACHE.DAT
2019-07-10 03:22 - 2016-12-13 16:51 - 000000000 ___SD C:\Windows\system32\CompatTel
2019-07-10 03:22 - 2016-12-13 16:51 - 000000000 ____D C:\Windows\system32\appraiser
2019-07-10 03:22 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\SysWOW64\Dism
2019-07-10 03:22 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\system32\Dism
2019-07-10 03:05 - 2016-12-13 12:34 - 000781804 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2019-07-10 03:02 - 2016-12-13 15:45 - 000000000 ____D C:\Windows\system32\MRT
2019-07-10 03:00 - 2016-12-13 15:45 - 136618864 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-07-07 09:49 - 2016-12-15 21:28 - 000000000 ____D C:\Users\Gina Crusco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP
2019-07-07 09:49 - 2016-12-15 17:31 - 000000000 ____D C:\ProgramData\HP
2019-07-07 09:49 - 2016-12-15 17:31 - 000000000 ____D C:\Program Files (x86)\HP
2019-07-07 09:46 - 2017-03-23 12:02 - 000000000 ____D C:\Windows\system32\appmgmt
2019-07-07 09:46 - 2016-12-15 19:13 - 000000000 ____D C:\Users\Gina Crusco\AppData\Local\Citrix
2019-07-07 09:46 - 2016-12-13 12:36 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2019-07-07 09:46 - 2009-07-14 01:32 - 000000000 ____D C:\Windows\Downloaded Program Files
2019-07-07 09:14 - 2016-12-13 12:27 - 000000000 ____D C:\Users\Gina Crusco
2019-07-05 15:45 - 2016-12-13 03:58 - 000000000 ____D C:\Users\Gina Crusco\AppData\Local\Adobe
2019-07-03 10:59 - 2017-01-03 18:29 - 000000000 ____D C:\Program Files (x86)\Stamps.com Internet Postage
2019-07-03 10:59 - 2016-12-13 12:27 - 000001413 _____ C:\Users\Gina Crusco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2019-07-03 10:58 - 2019-01-21 10:34 - 000000000 ____D C:\Users\Gina Crusco\AppData\Local\IIIQ
2019-07-03 07:33 - 2016-12-13 01:51 - 000121152 _____ C:\Users\Gina Crusco\AppData\Local\GDIPFONTCACHEV1.DAT
2019-07-01 16:01 - 2016-12-15 17:06 - 000000000 ____D C:\Users\Gina Crusco\Desktop\Bills backups
2019-07-01 10:24 - 2017-03-23 12:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2019-06-27 17:18 - 2016-12-13 03:29 - 000000000 ____D C:\Users\Gina Crusco\AppData\Roaming\Adobe
2019-06-27 16:15 - 2016-12-13 03:58 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2019-06-27 16:11 - 2016-12-13 03:58 - 000000000 ____D C:\ProgramData\Adobe
2019-06-27 16:11 - 2016-12-13 03:58 - 000000000 ____D C:\Program Files (x86)\Adobe
2019-06-27 15:40 - 2016-12-13 12:34 - 000000000 ____D C:\ProgramData\Package Cache
2019-06-25 10:56 - 2017-10-05 19:09 - 000000000 ____D C:\Users\Gina Crusco\AppData\Roaming\HP_Easy_Start
2019-06-25 10:48 - 2016-12-13 12:48 - 000000000 ____D C:\Users\Gina Crusco\AppData\Local\ElevatedDiagnostics
2019-06-24 11:27 - 2016-12-15 19:52 - 000000090 _____ C:\Windows\QBChanUtil_Trigger.ini
2019-06-18 02:40 - 2017-07-31 18:17 - 000000000 ____D C:\Program Files\Google
2019-06-18 02:40 - 2017-07-31 18:16 - 000000000 ____D C:\Program Files (x86)\Google
2019-06-18 02:36 - 2016-12-13 12:38 - 000000000 ____D C:\Temp
2019-06-18 02:36 - 2016-12-13 01:46 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2019-06-18 02:36 - 2016-12-13 01:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2019-06-18 02:34 - 2017-07-31 18:16 - 000000000 ____D C:\Users\Gina Crusco\AppData\Local\Google
2019-06-18 02:33 - 2017-03-23 12:26 - 000000000 ____D C:\ProgramData\Avira
2019-06-18 02:33 - 2017-03-23 12:26 - 000000000 ____D C:\Program Files (x86)\Avira
2019-06-18 02:19 - 2017-03-23 12:08 - 000000000 ____D C:\AdwCleaner
2019-06-18 02:13 - 2017-07-31 18:11 - 000000000 ____D C:\Program Files (x86)\Driver Support
2019-06-17 22:12 - 2017-05-18 12:30 - 000000000 ____D C:\Users\Gina Crusco\AppData\Local\Avira
2019-06-17 22:08 - 2019-02-04 00:28 - 000000000 ____D C:\Windows\Minidump
2019-06-17 14:25 - 2017-07-31 18:11 - 000003512 _____ C:\Windows\System32\Tasks\Driver Support
==================== Files in the root of some directories ================
2018-11-19 14:37 - 2018-11-19 15:32 - 000280509 _____ () C:\Users\Gina Crusco\AppData\Roaming\QBFileDrTool_GINACRUSCO-PC.log
2019-06-27 15:41 - 2019-06-27 15:41 - 000000410 _____ () C:\Users\Gina Crusco\AppData\Local\oobelibMkey.log
==================== SigCheck ===============================
(There is no automatic fix for files that do not pass verification.)
LastRegBack: 2019-07-12 00:12
==================== End of FRST.txt ============================
