Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by Owner (administrator) on OWNER-HP on 22-09-2014 11:59:22
Running from C:\Users\Owner\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2096424 2010-05-27] (Synaptics Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-04-23] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)
HKLM-x32\...\Run: [RIMBBLaunchAgent.exe] => C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [90448 2011-11-02] (Research In Motion Limited)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-15] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-09-21] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1553410331-2011814090-1478867285-1000\...\Run: [HPAdvisorDock] => C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe [1712184 2010-02-09] ()
HKU\S-1-5-21-1553410331-2011814090-1478867285-1000\...\Run: [ccleaner] => C:\Program Files\CCleaner\CCleaner64.exe [4389696 2011-07-25] (Piriform Ltd)
HKU\S-1-5-21-1553410331-2011814090-1478867285-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-06-24] (Google Inc.)
HKU\S-1-5-21-1553410331-2011814090-1478867285-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\S-1-5-21-1553410331-2011814090-1478867285-1000\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [907136 2010-01-16] (Microsoft Corporation)
HKU\S-1-5-21-1553410331-2011814090-1478867285-1000\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
HKU\S-1-5-21-1553410331-2011814090-1478867285-1000\...\MountPoints2: {5b8d1575-8f30-11e1-afb0-643150869d3a} - G:\LaunchU3.exe
Lsa: [Notification Packages] EgisPwdFilter EgisDSPwdFilter
Startup: C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Owner\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=UP97&ocid=UP97DHP&dt=072013
SearchScopes: HKLM - {31B1C56D-5924-4611-AD60-BBD4D44F0EDA} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {5B39E99D-141E-4877-B9FC-CDA6C055F262} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 - {31B1C56D-5924-4611-AD60-BBD4D44F0EDA} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {5B39E99D-141E-4877-B9FC-CDA6C055F262} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKCU - {31B1C56D-5924-4611-AD60-BBD4D44F0EDA} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {5B39E99D-141E-4877-B9FC-CDA6C055F262} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: EgisPBIE Class -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\x64\EgisPBIE.dll (Egis Technology Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: EgisPBIE Class -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\EgisPBIE.dll (Egis Technology Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.systemrequirementslab.com/bin/srldetect_intel_4.5.24.0.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76

FireFox:
========
FF ProfilePath: C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\voy96wbi.default
FF Homepage: www.msn.com
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-09-19]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-09-19]
FF HKLM-x32\...\Firefox\Extensions: [{41ecbc0b-34d5-4cd4-935f-253a30e2cb7e}] - C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\FFExt
FF Extension: SimplePass Online Accounts Extension  - C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\FFExt [2011-03-12]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-09-21]

Chrome: 
=======
CHR HomePage: Default -> 69B7D7FA56096812392F9E77B7D71499358D4A521228CB56008F33902C8152A9
CHR DefaultSearchKeyword: Default -> CEBD2DC6E693FDD011F45A6080F5623035702B6502BD7FCEEA508186A4809636
CHR DefaultSearchURL: Default -> 181D9C30D5B767B91E77F0B499860AE9C3B43A4734BBC4EA383C27EBD87C96AD
CHR Profile: C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-15]
CHR Extension: (Google Drive) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-15]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-07-04]
CHR Extension: (YouTube) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-15]
CHR Extension: (Google Search) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-15]
CHR Extension: (Skype Click to Call) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-12-15]
CHR Extension: (Google Wallet) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-15]
CHR Extension: (Gmail) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-15]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-09-21]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-05-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-09-21] (AVAST Software)
S2 CSHelper; C:\Windows\SysWOW64\CSHelper.exe [266240 2012-02-06] () [File not signed]
S2 DMAgent; C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe [408576 2010-06-07] (Red Bend Ltd.) [File not signed]
S2 DvmMDES; C:\SwSetup\HPQWMM\QuickWeb\QW.SYS\config\DVMExportService.exe [338168 2010-06-25] (DeviceVM, Inc.)
S2 EgisTec Service; C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\EgisService.exe [697712 2010-06-09] (Egis Technology Inc. )
S2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed]
S2 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [27192 2010-06-29] ()
S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2011-08-31] () [File not signed]
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] ()
S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
S2 SoftShieldService; C:\Program Files (x86)\ExamSoft\SofTest 11.0\Examsoft.ShieldRunner.exe [33600 2013-06-11] (Hewlett-Packard)
S2 WiMAXAppSrv; C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe [911872 2010-06-07] (Intel(R) Corporation) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-09-21] ()
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-09-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-09-21] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-09-21] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-09-21] (AVAST Software)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-09-21] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-09-21] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-09-21] ()
S1 DVMIO; C:\Windows\System32\DRIVERS\dvmio.sys [20056 2009-11-11] (DeviceVM, Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-22] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [74752 2011-07-25] (Research In Motion Limited)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-22 11:17 - 2014-09-22 11:17 - 00000000 ____D () C:\Users\Owner\AppData\Local\{B0F018D9-775B-4483-86FE-A3CC5FC237DE}
2014-09-22 11:12 - 2014-09-22 11:12 - 00405504 _____ () C:\Users\Owner\Desktop\intel_srldetect_4.5.13.0.msi
2014-09-22 09:28 - 2014-09-22 09:28 - 00000000 ____D () C:\Users\Owner\AppData\Local\{57378140-458C-4673-AE42-9989486151C8}
2014-09-21 23:50 - 2014-09-21 23:50 - 00000000 ____D () C:\Users\Owner\AppData\Local\{A78D90BB-F7C4-407D-95AD-2F1F2C2F9D34}
2014-09-21 23:49 - 2014-09-22 11:16 - 00000012 ____H () C:\dvmexp.idx
2014-09-21 23:49 - 2014-09-21 23:49 - 00000000 ___HD () C:\dvmexp
2014-09-21 23:49 - 2014-09-21 23:49 - 00000000 ____D () C:\temp
2014-09-21 23:45 - 2014-09-21 23:48 - 00000000 ____D () C:\AdwCleaner
2014-09-21 23:42 - 2014-09-21 23:42 - 01373475 _____ () C:\Users\Owner\Desktop\AdwCleaner.exe
2014-09-21 23:32 - 2014-09-21 23:32 - 00000000 ____D () C:\Users\Owner\AppData\Local\{C03EC082-FC94-4A82-B0B8-72F6C0362014}
2014-09-21 23:21 - 2014-09-21 23:50 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-09-21 23:21 - 2014-09-21 23:21 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-09-21 23:21 - 2014-09-21 23:21 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-09-21 23:21 - 2014-09-21 23:21 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-09-21 23:21 - 2014-09-21 23:21 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-09-21 23:21 - 2014-09-21 23:21 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-09-21 23:21 - 2014-09-21 23:21 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-09-21 23:21 - 2014-09-21 23:21 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-09-21 23:21 - 2014-09-21 23:21 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-09-21 23:21 - 2014-09-21 23:21 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-09-21 23:21 - 2014-09-21 23:21 - 00001926 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-09-21 23:21 - 2014-09-21 23:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-09-21 23:20 - 2014-09-21 23:20 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-09-21 23:20 - 2014-09-21 23:20 - 00000000 ____D () C:\Program Files\AVAST Software
2014-09-21 23:13 - 2014-09-21 23:13 - 00000000 ____D () C:\Users\Owner\AppData\Local\{DBFF571F-C38A-4BC5-B719-B65E2B06348A}
2014-09-21 23:11 - 2014-09-21 23:11 - 00000000 ____D () C:\ProgramData\Symantec
2014-09-21 23:09 - 2014-09-21 23:09 - 00000000 _____ () C:\Windows\SysWOW64\config.nt
2014-09-21 23:05 - 2014-09-21 23:05 - 00214378 _____ () C:\Users\Owner\Desktop\avgremover.log
2014-09-21 12:58 - 2014-09-21 12:58 - 00000000 ____D () C:\Users\Owner\AppData\Local\{E5BE930A-A894-4BB3-806F-DAB7A0E8E56B}
2014-09-21 12:00 - 2014-09-21 12:00 - 00000000 ____D () C:\Users\Owner\AppData\Local\{00D23484-7362-4C88-89FD-416A6C7FEF09}
2014-09-21 11:52 - 2014-09-21 11:52 - 00869456 _____ () C:\Users\Owner\Desktop\Norton_Removal_Tool.exe
2014-09-21 11:51 - 2014-09-21 11:51 - 03681088 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Owner\Desktop\avg_remover_stf_x86_2015_5501.exe
2014-09-21 11:45 - 2014-09-21 11:45 - 91906368 _____ (AVAST Software) C:\Users\Owner\Desktop\avast_free_antivirus_setup.exe
2014-09-19 17:48 - 2014-09-19 17:48 - 00044015 _____ () C:\Users\Owner\Desktop\Addition.txt
2014-09-19 17:46 - 2014-09-22 11:59 - 00016204 _____ () C:\Users\Owner\Desktop\FRST.txt
2014-09-19 17:46 - 2014-09-22 11:59 - 00000000 ____D () C:\FRST
2014-09-19 17:45 - 2014-09-19 17:45 - 02105856 _____ (Farbar) C:\Users\Owner\Desktop\FRST64.exe
2014-09-19 17:43 - 2014-09-19 17:43 - 01097728 _____ (Farbar) C:\Users\Owner\Desktop\FRST.exe
2014-09-19 16:50 - 2014-09-19 16:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-19 15:00 - 2014-09-19 15:00 - 52142776 _____ (AVAST Software) C:\Users\Owner\Desktop\vpsupd.exe
2014-09-19 14:37 - 2014-09-21 23:32 - 00000000 ____D () C:\Users\Owner\AppData\Roaming\AVAST Software
2014-09-19 14:30 - 2014-09-21 23:21 - 00000350 ____H () C:\Windows\Tasks\avast! Emergency Update.job
2014-09-19 14:29 - 2014-09-19 14:29 - 04862664 _____ (AVAST Software) C:\Users\Owner\Desktop\avast_free_antivirus_setup_online.exe
2014-09-19 14:26 - 2014-09-19 14:26 - 00002243 _____ () C:\Windows\epplauncher.mif
2014-09-19 14:13 - 2014-09-19 14:13 - 14087848 _____ (Microsoft Corporation) C:\Users\Owner\Desktop\mseinstall.exe
2014-09-19 13:49 - 2014-09-19 13:50 - 00000177 _____ () C:\Windows\system32\avgrep.txt
2014-09-19 13:42 - 2014-09-19 13:42 - 00000000 ____D () C:\Users\Owner\AppData\Local\{D7D44937-A6C5-4884-A32C-59CEF11382BB}
2014-09-19 13:35 - 2014-09-19 13:35 - 00000000 ____D () C:\Users\Owner\AppData\Roaming\TuneUp Software
2014-09-19 13:30 - 2014-09-19 13:30 - 00310376 _____ () C:\Users\Owner\Desktop\error.cab
2014-09-19 13:27 - 2014-09-19 14:10 - 00000000 ____D () C:\Users\Owner\AppData\Local\AvgSetupLog
2014-09-19 13:27 - 2014-09-19 14:10 - 00000000 ____D () C:\ProgramData\Avg
2014-09-19 13:27 - 2014-09-19 13:27 - 00000000 ____D () C:\Users\Owner\AppData\Local\Avg
2014-09-19 13:26 - 2014-09-19 13:26 - 15722448 _____ (AVG Technologies) C:\Users\Owner\Documents\avg_gsr_stb_all_329p1_100.exe
2014-09-19 11:28 - 2014-09-19 11:28 - 00000000 ____D () C:\Users\Owner\AppData\Local\{4FE78944-44D6-470D-B89A-6A6FB5A4A293}
2014-09-19 10:59 - 2014-09-22 11:17 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-19 10:54 - 2014-09-19 10:54 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Owner\Desktop\mbam-setup-2.0.2.1012.exe
2014-09-19 10:54 - 2014-09-19 10:54 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-09-19 10:54 - 2014-09-19 10:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-09-19 10:54 - 2014-09-19 10:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-19 10:54 - 2014-09-19 10:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-09-19 10:54 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-19 10:54 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-19 10:54 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-19 10:41 - 2014-09-19 10:47 - 536549544 _____ () C:\Users\Owner\Documents\AdAwareStandaloneInstaller.exe
2014-09-19 10:37 - 2014-09-19 10:39 - 02806920 _____ () C:\Users\Owner\Documents\Adaware_Installer.exe
2014-09-19 10:37 - 2014-09-19 10:37 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-09-18 22:59 - 2014-09-18 22:59 - 119359736 _____ (Microsoft Corporation) C:\Users\Owner\Desktop\msert.exe
2014-09-17 16:49 - 2014-09-17 16:56 - 00000000 ____D () C:\Users\Owner\Documents\step scores
2014-09-09 16:44 - 2014-09-09 16:44 - 17903792 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-09-01 18:01 - 2014-09-14 14:56 - 00000000 ____D () C:\Users\Owner\Documents\nbme
2014-08-30 23:22 - 2014-08-30 23:24 - 00000000 ____D () C:\Users\Owner\Documents\try to organize
2014-08-28 18:42 - 2014-08-28 18:42 - 00549928 _____ () C:\Windows\Minidump\082814-87625-01.dmp
2014-08-27 23:48 - 2014-08-22 22:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-27 23:48 - 2014-08-22 21:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-27 23:48 - 2014-08-22 20:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-23 15:48 - 2014-08-23 15:59 - 00000000 ____D () C:\Users\Owner\Desktop\eras2
2014-08-23 13:04 - 2014-09-06 11:48 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-22 11:59 - 2014-09-19 17:46 - 00016204 _____ () C:\Users\Owner\Desktop\FRST.txt
2014-09-22 11:59 - 2014-09-19 17:46 - 00000000 ____D () C:\FRST
2014-09-22 11:54 - 2012-09-16 17:43 - 00918952 _____ (Oracle Corporation) C:\Users\Owner\Desktop\jxpiinstall.exe
2014-09-22 11:31 - 2014-08-16 10:22 - 00000332 _____ () C:\Windows\Tasks\HPCeeScheduleForOwner.job
2014-09-22 11:24 - 2009-07-14 00:45 - 00026192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-22 11:23 - 2009-07-14 00:45 - 00026192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-22 11:19 - 2012-08-23 21:40 - 00000000 ___RD () C:\Users\Owner\Dropbox
2014-09-22 11:19 - 2012-08-23 21:38 - 00000000 ____D () C:\Users\Owner\AppData\Roaming\Dropbox
2014-09-22 11:17 - 2014-09-22 11:17 - 00000000 ____D () C:\Users\Owner\AppData\Local\{B0F018D9-775B-4483-86FE-A3CC5FC237DE}
2014-09-22 11:17 - 2014-09-19 10:59 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-22 11:16 - 2014-09-21 23:49 - 00000012 ____H () C:\dvmexp.idx
2014-09-22 11:16 - 2013-06-12 19:17 - 00025648 _____ () C:\Windows\setupact.log
2014-09-22 11:16 - 2012-05-26 20:27 - 00000000 ____D () C:\Users\Owner\Tracing
2014-09-22 11:16 - 2011-06-24 18:46 - 00000892 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-22 11:16 - 2011-03-12 08:11 - 00000050 _____ () C:\Windows\system32\SupplicantTest.log
2014-09-22 11:16 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-22 11:12 - 2014-09-22 11:12 - 00405504 _____ () C:\Users\Owner\Desktop\intel_srldetect_4.5.13.0.msi
2014-09-22 09:50 - 2013-06-11 14:10 - 01286186 _____ () C:\Windows\WindowsUpdate.log
2014-09-22 09:49 - 2011-06-24 18:46 - 00000896 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-22 09:40 - 2011-08-09 19:21 - 00000000 ____D () C:\Users\Owner\AppData\Roaming\uTorrent
2014-09-22 09:28 - 2014-09-22 09:28 - 00000000 ____D () C:\Users\Owner\AppData\Local\{57378140-458C-4673-AE42-9989486151C8}
2014-09-21 23:54 - 2009-07-14 01:13 - 00006226 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-21 23:51 - 2012-08-23 21:40 - 00001017 _____ () C:\Users\Owner\Desktop\Dropbox.lnk
2014-09-21 23:51 - 2012-08-23 21:39 - 00000000 ____D () C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-09-21 23:50 - 2014-09-21 23:50 - 00000000 ____D () C:\Users\Owner\AppData\Local\{A78D90BB-F7C4-407D-95AD-2F1F2C2F9D34}
2014-09-21 23:50 - 2014-09-21 23:21 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-09-21 23:49 - 2014-09-21 23:49 - 00000000 ___HD () C:\dvmexp
2014-09-21 23:49 - 2014-09-21 23:49 - 00000000 ____D () C:\temp
2014-09-21 23:48 - 2014-09-21 23:45 - 00000000 ____D () C:\AdwCleaner
2014-09-21 23:48 - 2013-10-04 22:39 - 01146300 _____ () C:\Windows\PFRO.log
2014-09-21 23:42 - 2014-09-21 23:42 - 01373475 _____ () C:\Users\Owner\Desktop\AdwCleaner.exe
2014-09-21 23:32 - 2014-09-21 23:32 - 00000000 ____D () C:\Users\Owner\AppData\Local\{C03EC082-FC94-4A82-B0B8-72F6C0362014}
2014-09-21 23:32 - 2014-09-19 14:37 - 00000000 ____D () C:\Users\Owner\AppData\Roaming\AVAST Software
2014-09-21 23:28 - 2011-11-24 20:27 - 00000000 ____D () C:\Windows\Minidump
2014-09-21 23:21 - 2014-09-21 23:21 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-09-21 23:21 - 2014-09-21 23:21 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-09-21 23:21 - 2014-09-21 23:21 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-09-21 23:21 - 2014-09-21 23:21 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-09-21 23:21 - 2014-09-21 23:21 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-09-21 23:21 - 2014-09-21 23:21 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-09-21 23:21 - 2014-09-21 23:21 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-09-21 23:21 - 2014-09-21 23:21 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-09-21 23:21 - 2014-09-21 23:21 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-09-21 23:21 - 2014-09-21 23:21 - 00001926 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-09-21 23:21 - 2014-09-21 23:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-09-21 23:21 - 2014-09-19 14:30 - 00000350 ____H () C:\Windows\Tasks\avast! Emergency Update.job
2014-09-21 23:20 - 2014-09-21 23:20 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-09-21 23:20 - 2014-09-21 23:20 - 00000000 ____D () C:\Program Files\AVAST Software
2014-09-21 23:13 - 2014-09-21 23:13 - 00000000 ____D () C:\Users\Owner\AppData\Local\{DBFF571F-C38A-4BC5-B719-B65E2B06348A}
2014-09-21 23:11 - 2014-09-21 23:11 - 00000000 ____D () C:\ProgramData\Symantec
2014-09-21 23:09 - 2014-09-21 23:09 - 00000000 _____ () C:\Windows\SysWOW64\config.nt
2014-09-21 23:05 - 2014-09-21 23:05 - 00214378 _____ () C:\Users\Owner\Desktop\avgremover.log
2014-09-21 12:58 - 2014-09-21 12:58 - 00000000 ____D () C:\Users\Owner\AppData\Local\{E5BE930A-A894-4BB3-806F-DAB7A0E8E56B}
2014-09-21 12:51 - 2011-03-12 08:25 - 00000000 ____D () C:\ProgramData\Norton
2014-09-21 12:00 - 2014-09-21 12:00 - 00000000 ____D () C:\Users\Owner\AppData\Local\{00D23484-7362-4C88-89FD-416A6C7FEF09}
2014-09-21 11:52 - 2014-09-21 11:52 - 00869456 _____ () C:\Users\Owner\Desktop\Norton_Removal_Tool.exe
2014-09-21 11:51 - 2014-09-21 11:51 - 03681088 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Owner\Desktop\avg_remover_stf_x86_2015_5501.exe
2014-09-21 11:45 - 2014-09-21 11:45 - 91906368 _____ (AVAST Software) C:\Users\Owner\Desktop\avast_free_antivirus_setup.exe
2014-09-21 09:57 - 2012-04-25 10:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-19 17:48 - 2014-09-19 17:48 - 00044015 _____ () C:\Users\Owner\Desktop\Addition.txt
2014-09-19 17:45 - 2014-09-19 17:45 - 02105856 _____ (Farbar) C:\Users\Owner\Desktop\FRST64.exe
2014-09-19 17:43 - 2014-09-19 17:43 - 01097728 _____ (Farbar) C:\Users\Owner\Desktop\FRST.exe
2014-09-19 16:50 - 2014-09-19 16:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-19 15:00 - 2014-09-19 15:00 - 52142776 _____ (AVAST Software) C:\Users\Owner\Desktop\vpsupd.exe
2014-09-19 14:33 - 2011-06-24 18:16 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-09-19 14:29 - 2014-09-19 14:29 - 04862664 _____ (AVAST Software) C:\Users\Owner\Desktop\avast_free_antivirus_setup_online.exe
2014-09-19 14:26 - 2014-09-19 14:26 - 00002243 _____ () C:\Windows\epplauncher.mif
2014-09-19 14:13 - 2014-09-19 14:13 - 14087848 _____ (Microsoft Corporation) C:\Users\Owner\Desktop\mseinstall.exe
2014-09-19 14:10 - 2014-09-19 13:27 - 00000000 ____D () C:\Users\Owner\AppData\Local\AvgSetupLog
2014-09-19 14:10 - 2014-09-19 13:27 - 00000000 ____D () C:\ProgramData\Avg
2014-09-19 13:50 - 2014-09-19 13:49 - 00000177 _____ () C:\Windows\system32\avgrep.txt
2014-09-19 13:44 - 2013-05-19 21:23 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-19 13:42 - 2014-09-19 13:42 - 00000000 ____D () C:\Users\Owner\AppData\Local\{D7D44937-A6C5-4884-A32C-59CEF11382BB}
2014-09-19 13:35 - 2014-09-19 13:35 - 00000000 ____D () C:\Users\Owner\AppData\Roaming\TuneUp Software
2014-09-19 13:30 - 2014-09-19 13:30 - 00310376 _____ () C:\Users\Owner\Desktop\error.cab
2014-09-19 13:27 - 2014-09-19 13:27 - 00000000 ____D () C:\Users\Owner\AppData\Local\Avg
2014-09-19 13:26 - 2014-09-19 13:26 - 15722448 _____ (AVG Technologies) C:\Users\Owner\Documents\avg_gsr_stb_all_329p1_100.exe
2014-09-19 11:28 - 2014-09-19 11:28 - 00000000 ____D () C:\Users\Owner\AppData\Local\{4FE78944-44D6-470D-B89A-6A6FB5A4A293}
2014-09-19 11:20 - 2012-02-10 15:29 - 00000000 ____D () C:\ProgramData\InstallMate
2014-09-19 11:20 - 2009-07-14 01:32 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-09-19 10:54 - 2014-09-19 10:54 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Owner\Desktop\mbam-setup-2.0.2.1012.exe
2014-09-19 10:54 - 2014-09-19 10:54 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-09-19 10:54 - 2014-09-19 10:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-09-19 10:54 - 2014-09-19 10:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-19 10:54 - 2014-09-19 10:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-09-19 10:47 - 2014-09-19 10:41 - 536549544 _____ () C:\Users\Owner\Documents\AdAwareStandaloneInstaller.exe
2014-09-19 10:39 - 2014-09-19 10:37 - 02806920 _____ () C:\Users\Owner\Documents\Adaware_Installer.exe
2014-09-19 10:37 - 2014-09-19 10:37 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-09-18 22:59 - 2014-09-18 22:59 - 119359736 _____ (Microsoft Corporation) C:\Users\Owner\Desktop\msert.exe
2014-09-18 21:16 - 2014-05-09 15:19 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-18 21:16 - 2011-06-05 22:08 - 00000000 ____D () C:\Users\Owner
2014-09-18 21:16 - 2009-07-13 23:20 - 00000000 __RSD () C:\Windows\Media
2014-09-18 21:16 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-09-18 21:15 - 2013-12-15 23:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-09-18 21:15 - 2011-06-05 22:18 - 00000000 ____D () C:\Users\Owner\AppData\Local\Hewlett-Packard
2014-09-18 21:15 - 2011-03-12 08:24 - 00000000 ____D () C:\ProgramData\CinemaNow
2014-09-18 21:15 - 2009-07-13 23:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-09-18 21:14 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\registration
2014-09-18 21:13 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\schemas
2014-09-18 21:08 - 2011-08-31 21:58 - 00000000 __RHD () C:\MSOCache
2014-09-18 20:07 - 2011-06-30 18:29 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-18 20:05 - 2013-08-15 06:49 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-18 19:13 - 2011-03-12 08:53 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-09-18 18:59 - 2012-05-17 19:10 - 00000000 ____D () C:\Users\Owner\AppData\Roaming\Media Player Classic
2014-09-18 17:08 - 2011-08-10 01:45 - 00000000 ____D () C:\Users\Owner\AppData\Local\CrashDumps
2014-09-17 22:54 - 2011-06-05 22:20 - 00000221 _____ () C:\Users\Owner\AppData\Local\mv_music.xml
2014-09-17 16:56 - 2014-09-17 16:49 - 00000000 ____D () C:\Users\Owner\Documents\step scores
2014-09-16 18:41 - 2011-06-05 22:20 - 00000167 _____ () C:\Users\Owner\AppData\Local\mv_Photo.xml
2014-09-14 14:56 - 2014-09-01 18:01 - 00000000 ____D () C:\Users\Owner\Documents\nbme
2014-09-12 10:28 - 2011-07-28 18:02 - 00000000 ____D () C:\Users\Owner\Documents\clinicals
2014-09-09 23:31 - 2014-08-16 10:23 - 00003186 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForOwner
2014-09-09 16:44 - 2014-09-09 16:44 - 17903792 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-09-09 16:44 - 2013-05-19 21:23 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-09 16:44 - 2013-05-19 21:23 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-09 16:44 - 2011-07-05 14:22 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-09 10:08 - 2013-06-30 16:01 - 555725919 _____ () C:\Windows\MEMORY.DMP
2014-09-08 17:23 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-06 11:48 - 2014-08-23 13:04 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-09-06 11:48 - 2014-08-03 22:44 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-09-03 21:49 - 2013-12-15 23:03 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-02 11:03 - 2011-06-24 18:41 - 00000000 ____D () C:\Users\Owner\AppData\Roaming\Skype
2014-09-01 17:58 - 2010-10-26 14:45 - 00000000 ____D () C:\ProgramData\Skype
2014-08-31 10:11 - 2011-06-30 18:29 - 00000000 ____D () C:\Users\Owner\AppData\Local\Microsoft Help
2014-08-30 23:24 - 2014-08-30 23:22 - 00000000 ____D () C:\Users\Owner\Documents\try to organize
2014-08-28 18:42 - 2014-08-28 18:42 - 00549928 _____ () C:\Windows\Minidump\082814-87625-01.dmp
2014-08-28 18:42 - 2009-07-14 00:45 - 00418648 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-23 15:59 - 2014-08-23 15:48 - 00000000 ____D () C:\Users\Owner\Desktop\eras2

Some content of TEMP:
====================
C:\Users\Owner\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp0ul11k.dll
C:\Users\Owner\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-29 19:37

==================== End Of Log ============================